CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2020-15713
Severity
HIGH
CVSS
8.8
EPSS
2.79%
Original NVD Description
rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Related CVEs
Other vulnerabilities affecting the same vendor(s)