rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-10-19T12:54:26

Updated: 2024-08-04T12:25:16.477Z

Reserved: 2020-06-03T00:00:00

Link: CVE-2020-13778

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-10-19T13:15:13.203

Modified: 2024-11-21T05:01:50.493

Link: CVE-2020-13778

cve-icon Redhat

No data.