CVE

CVE-2019-16662

9.8

CVSS

Description

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerSettingsChk.php because the rootUname parameter is passed to the exec function without filtering, which can lead to command execution.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~15 seconds

CVE-2019-16662 Scanner

CVE-2019-16662 scanner - OS Command Injection vulnerability in rConfig

Used 2.1k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →