CVE-2022-41474

概要

参考情報

• ralap-z/rpcms · Exploit

rpcms のその他の脆弱性

• CVE-2023-50565中 5.4A cross-site scripting (XSS) vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scri…
• CVE-2022-41475高 8.8RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator accoun…
• CVE-2022-41473中 6.1RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.
• CVE-2021-37394高 8.8In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
• CVE-2021-37393中 5.4In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password…