CVE-2020-25082
An attacker with physical access to Nuvoton Trusted Platform Module…
The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized,…
The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized,…
The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized,…
The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized,…
A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows…
rConfig 3.9.5 allows command injection by sending a crafted GET…