Vulnerability Description
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rconfig | Rconfig | 3.9.3 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/156146/rConfig-3.9.3-Remote-Code-Execution.ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-ExecExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-CodExploitThird Party AdvisoryVDB Entry
- https://github.com/v1k1ngfrExploitThird Party Advisory
- https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2019-19509.ExploitThird Party Advisory
- https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_exploit.py?toBroken Link
- http://packetstormsecurity.com/files/156146/rConfig-3.9.3-Remote-Code-Execution.ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-ExecExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-CodExploitThird Party AdvisoryVDB Entry
- https://github.com/v1k1ngfrExploitThird Party Advisory
- https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2019-19509.ExploitThird Party Advisory
- https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_exploit.py?toBroken Link
FAQ
What is CVE-2019-19509?
CVE-2019-19509 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the ...
How severe is CVE-2019-19509?
CVE-2019-19509 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-19509?
Check the references section above for vendor advisories and patch information. Affected products include: Rconfig Rconfig.