← All advisories

High severity8.8NVD Advisory· Published Jul 26, 2021· Updated Jun 17, 2026

CVE-2021-37394

CVE-2021-37394

Description

In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

RPCMS/RPCMS3 versions
cpe:2.3:a:rpcms:rpcms:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:rpcms:rpcms:*:*:*:*:*:*:*:*range: <=1.8
- (no CPE)
- (no CPE)range: <=1.8

Patches

Vulnerability mechanics

References

1

gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626fnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.