VULNERABILITY INTELLIGENCE

CVE-2020-10221

CVSS score9 HIGH

EPSS probability77.12%

CISA KEVKnown exploited vulnerability

Published2020-03-08

Last modified2026-06-17

Known Exploited Vulnerability

rConfig OS Command Injection Vulnerability

Vendor / product: rConfig / rConfig

Description

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.