Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/05 3:27 p.m.4 views

CVE-2025-14007

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api=demo=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high complexity...

6.1CVSS5.1AI score0.00225EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/04 3:30 p.m.4 views

EUVD-2025-201187

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high...

2CVSS4.7AI score0.00225EPSS
Exploits1References5
OSV
OSV
added 2025/12/04 3:15 p.m.3 views

CVE-2025-14007

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high...

6.1CVSS4.1AI score0.00225EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/04 2:32 p.m.4 views

CVE-2025-14007 dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high...

2CVSS4.8AI score0.00225EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/04 2:32 p.m.21 views

CVE-2025-14007 dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high...

2CVSS0.00225EPSS
Exploits1References4
CVE
CVE
added 2025/12/04 2:32 p.m.6 views

CVE-2025-14007

CVE-2025-14007 affects dayrui XunRuiCMS up to v4.7.1. Affected component: the Domain Name Binding Page, specifically the file path /admin79f2ec220c7e.php?c=api&m=demo&name=mobile. Root cause described as incorrect handling/manipulation in that page, resulting in cross-site scripting. Attacker can...

6.1CVSS3AI score0.00225EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.3 views

XunRuiCMS 代码注入漏洞

XunRuiCMS XunRuiCMS is a content management system for individual developers of XunRuiCMS. A code injection vulnerability exists in XunRuiCMS 4.7.1 and earlier versions, which stems from incorrect manipulation of the component Domain Name Binding Page in the file /admin79f2ec220c7e.php, which cou...

6.1CVSS4AI score0.00225EPSS
Exploits1References4
Rows per page
Query Builder