Design/Logic Flaw

2021-07-2618:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

In RPCMS v1.8 and below, attackers can interact with API and change variable “role” to “admin” to achieve admin user registration.

CPENameOperatorVersion
rpcmsle1.8

CPE	Name	Operator	Version
	rpcms	le	1.8

References

gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f

github.com/ralap-z/RPCMS/