mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 19:21:35 +02:00
642 B
642 B
CVE-2020-23148
Description
The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request.
POC
Reference
No PoCs from references.