CVE-2021-37394

Mô tả

Tham khảo

• gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f · Exploit
• ralap-z/RPCMS · Product

Lỗ hổng khác của rpcms

• CVE-2023-50565TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability in the component /logs/dopost.html in RPCMS v3.5.5 allows attackers to execute arbitrary web scri…
• CVE-2022-41475CAO 8.8RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator accoun…
• CVE-2022-41474TRUNG BÌNH 6.5RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any …
• CVE-2022-41473TRUNG BÌNH 6.1RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function.
• CVE-2021-37393TRUNG BÌNH 5.4In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password…