WEB rConfig compliancepolicies.php and compliancepolicyelements.php and snippets.php SQL Injection -1 (CVE-2020-10546)

Rule ID

1137237

Severity

Critical

Description

A SQL injection vulnerability has been reported in rConfig Network Device Configuration Tool. The vulnerability is due to insufficient input validation in the ompliancepolicies.php and compliancepolicyelements.php and snippets.php.

Impact

SQL injection

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A