PT-2021-21632

Name of the Vulnerable Software and Affected Versions RPCMS versions 1.8 and below Description The issue arises from the nickname variable not being properly sanitized before being displayed on a page. An attacker can exploit this by using the update password function to inject XSS payloads into...

SQL Injection Vulnerability in RPCMS (CNVD-2021-51820)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in RPCMS (CNVD-2021-51832)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in RPCMS (CNVD-2021-51831)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in RPCMS (CNVD-2021-51833)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

RPCMS suffers from a file upload vulnerability (CNVD-2021-45388)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a file upload vulnerability. An attacker can exploit this vulnerability to gain server privileges...

SQL Injection Vulnerability in RPCMS (CNVD-2021-45386)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL. RPCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

RPCMS has a file upload vulnerability

RPCMS is a lightweight php content management system, which can be used as a blog system, corporate website system, etc. RPCMS has a file upload vulnerability that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in RPCMS (CNVD-2021-40742)

RPCMS is a lightweight php content management system, which can be used as a blog system, corporate website system, etc. RPCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in rpcms Backend

rpcms a lightweight php content management system , can be a blog system , enterprise website system , information system . It is small , lightweight , but feature-rich , scalable . rpcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...