2020-03-06

2020-03-07

2020-03-08

All (2) Critical (2) High (7) Medium (2)

CVE-2020-10220 CRITICAL POC THREAT Emergency

An issue was discovered in rConfig through 3.9.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Rconfig

NVD GitHub Exploit-DB

CVSS 3.1

9.8

EPSS

99.7%

CVE-2020-10212 CRITICAL POC Act Now

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF PHP Responsive Filemanager

NVD GitHub

CVSS 3.1

9.8

EPSS

1.5%