What’s Vulnerable › Vulnerabilities

CVE-2020-10221: rConfig OS Command Injection Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2021-11-03
• EPSS: 77.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-08 · updated 2026-06-17
• Weakness: CWE-78

Description

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.

Affected products

• rconfig: through 3.9.4

References

• http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
• https://cwe.mitre.org/data/definitions/78.html
• https://engindemirbilek.github.io/rconfig-3.93-rce
• https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html
• http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
• https://cwe.mitre.org/data/definitions/78.html
• https://engindemirbilek.github.io/rconfig-3.93-rce
• https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10221

Get alerted when CVE-2020-10221 or the next vulnerability affects your stack