Beveiligingsadvies

CVE-2021-29004

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-10-11 11:58:33

Laatst bijgewerkt 2026-07-09 00:13:01

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an attacker may successfully upload a webshell to the server and access it remotely.

← Alle CVE's bekijken Bekijk op cve.org ↗