CVE-2023-50565

概要

参考情報

• ralap-z/rpcms · Exploit

rpcms のその他の脆弱性

• CVE-2022-41475高 8.8RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator accoun…
• CVE-2022-41474中 6.5RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any …
• CVE-2022-41473中 6.1RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.
• CVE-2021-37394高 8.8In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
• CVE-2021-37393中 5.4In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password…