Critical severity9.8NVD Advisory· Published Aug 9, 2021· Updated Jun 17, 2026
CVE-2020-23151
CVE-2020-23151
Description
rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- rConfig/rConfigdescription
Patches
Vulnerability mechanics
References
2- github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/lib/ajaxHandlers/ajaxArchiveFiles.phpnvdExploitThird Party Advisory
- cwe.mitre.org/data/definitions/78.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.