CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 8:5 p.m.•11 views

CVE-2021-37394

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration...

8.8CVSS7AI score0.01171EPSS

Exploits1References1

OSV•added 2021/07/26 6:15 p.m.•3 views

CVE-2021-37394

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration...

8.8CVSS5.8AI score0.01171EPSS

Exploits1References2

NVD•added 2021/07/26 6:15 p.m.•23 views

CVE-2021-37394

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration...

8.8CVSS0.01171EPSS

Exploits1References2

CVE•added 2021/07/26 5:7 p.m.•52 views

CVE-2021-37394

RPCMS (v1.8 and earlier) contains an API-level flaw that allows attackers to alter the user role parameter to admin via the API, enabling admin account registration. The connected sources consistently describe this as a role-parameter manipulation vulnerability affecting RPCMS v1.8 and below, lea...

8.8CVSS8.6AI score0.01171EPSS

Exploits1References2Affected Software1