CVE-2020-15715 (rconfig)
rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
Source: CVE-2020-15715 (rconfig)