rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rconfig | Rconfig | 3.9.5 (including) | 3.9.5 (including) |