An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.Referenceshttps://www.exploit-db.com/exploits/49783