CVE-2020-10220 | rConfig up to 3.9.4 Web Interface commands.inc.php searchColumn sql injection (ID 156688 / EDB-48223)
A vulnerability was found in rConfig up to 3.9.4. It has been classified as critical. This affects an unknown part of the file commands.inc.php of the component Web Interface. The manipulation of the argument searchColumn as part of Parameter leads to sql injection.
This vulnerability is uniquely identified as CVE-2020-10220. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.