Vulnerabilities > Rconfig
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-11-28 | CVE-2019-19372 | Path Traversal vulnerability in Rconfig A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. | 7.5 |
| 2019-11-21 | CVE-2019-19207 | SQL Injection vulnerability in Rconfig 3.9.2 rConfig 3.9.2 allows devices.php?searchColumn= SQL injection. | 8.8 |
| 2019-10-28 | CVE-2019-16663 | OS Command Injection vulnerability in Rconfig 3.9.2 An issue was discovered in rConfig 3.9.2. | 8.8 |
| 2019-10-28 | CVE-2019-16662 | OS Command Injection vulnerability in Rconfig 3.9.2 An issue was discovered in rConfig 3.9.2. | 9.8 |