# CVE-2020-10221

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.

- Page: https://www.vulneraibility.com/cve/CVE-2020-10221
- CVSS: 8.8
- Known exploited: yes, in CISA KEV since 2021-11-03; CISA due date 2022-05-03
- EPSS: 77.28% (percentile 99.6)
- Public exploit code: 1 on Exploit-DB · 1 Nuclei template (first 2020-03-12)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-04)
- Weakness: CWE-78
- Published: 2020-03-08

## Affected

- rconfig:rconfig

## References

- [other] https://cwe.mitre.org/data/definitions/78.html
- [other] https://engindemirbilek.github.io/rconfig-3.93-rce
- [other] https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html
- [other] http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-10221

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.