CVE-2021-37394

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration...

CVE-2021-37394

RPCMS (v1.8 and earlier) contains an API-level flaw that allows attackers to alter the user role parameter to admin via the API, enabling admin account registration. The connected sources consistently describe this as a role-parameter manipulation vulnerability affecting RPCMS v1.8 and below, lea...

PT-2021-21633

Name of the Vulnerable Software and Affected Versions RPCMS versions 1.8 and below Description The issue allows attackers to interact with the API and change the role variable to admin, achieving admin user registration. Recommendations For RPCMS versions 1.8 and below, as a temporary workaround,...

CVE-2021-37394: Undefined Security Weakness

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration...