Design/Logic Flaw

2023-09-2715:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

remote code execution

xunruicms

get request

0.003 Low

EPSS

Percentile

68.1%

JSON

xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.

CPENameOperatorVersion
xunruicmsle4.5.1

CPE	Name	Operator	Version
	xunruicms	le	4.5.1

References

github.com/P0wfuu/xunruicms-RCE

0.003 Low

EPSS

Percentile

68.1%

JSON

Related for PRION:CVE-2021-38243