What's new

Rconfig 3.x Chained Remote Code Execution

Escobar-1

Extreme Hot Vendor
Verfied Vendor
Premium User
Joined
Jan 28, 2016
Messages
4,115
Reaction score
102
Points
63
h87.png

This Metasploit module takes advantage of a command injection vulnerability in the path parameter of the ajax archive file functionality within the rConfig web interface in order to execute the payload. Valid credentials for a user with administrative privileges are required.

However, this module can bypass authentication via SQL injection.

Site: https://dl.packetstormsecurity.net/2003-exploits/rconfig_ajaxarchivefiles_rce.rb.txt
 
Top