- Joined
- Jun 28, 2020
- Messages
- 6,304
- Reaction score
- 710
- Points
- 212
- Awards
- 2
This Metasploit module takes advantage of a command injection vulnerability in the path parameter of the ajax archive file functionality within the rConfig web interface in order to execute the payload. Valid credentials for a user with administrative privileges are required.
However, this module can bypass authentication via SQL injection.