SQL Injection

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. rConfig 3.9 - SQL InjectionCVE-2020-10220Rconfig · 100% likely

   CWE-89

2. rConfig 3.9.4 - SQL InjectionCVE-2020-10546Rconfig · 87% likely

   CWE-89

3. rConfig 3.9.4 - SQL InjectionCVE-2020-10547Rconfig · 37% likely

   CWE-89

4. rConfig 3.9.4 - SQL InjectionCVE-2020-10548Rconfig · 37% likely

   CWE-89

5. rConfig <=3.9.4 - SQL InjectionCVE-2020-10549Rconfig · 32% likely

   CWE-89

6. rConfig 3.9.2 allows devices.php?searchColumn= SQL injection.CVE-2019-19207Rconfig · 22% likely

   CWE-89

7. rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter,…CVE-2020-15714Rconfig · 2.8% likely

   CWE-89

8. rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could a…CVE-2020-15713Rconfig · 2.8% likely

   CWE-89

9. A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).CVE-2022-45030Rconfig · CVSS 8.8 · 2.7% likely

   CWE-89

10. rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the…CVE-2021-29004Rconfig · 2.1% likely

    CWE-89

11. A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/aj…CVE-2020-23150Rconfig · 1.6% likely

    CWE-89

12. The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information.CVE-2020-23149Rconfig · 1.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.