SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  rConfig ajaxArchiveFiles.php Command Injection 2

Category: WEB-ATTACKS      

An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19509


Relevant Information