← All advisories

High severity8.8NVD Advisory· Published Nov 21, 2019· Updated Jun 17, 2026

CVE-2019-19207

CVE-2019-19207

Description

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.

Affected products

3

rConfig/rConfig2 versions
cpe:2.3:a:rconfig:rconfig:3.9.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:rconfig:rconfig:3.9.2:*:*:*:*:*:*:*
- (no CPE)range: =3.9.2
rConfig/rConfigdescription

Patches

Vulnerability mechanics

References

1

twitter.com/sky_xiaoxuan/status/1189420530396303360nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.