CVE-2023-50565

Description

References

• ralap-z/rpcms · Exploit

Weitere Schwachstellen in rpcms

• CVE-2022-41475HOCH 8.8RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator accoun…
• CVE-2022-41474MITTEL 6.5RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any …
• CVE-2022-41473MITTEL 6.1RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.
• CVE-2021-37394HOCH 8.8In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
• CVE-2021-37393MITTEL 5.4In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password…