CVE-2026-120347 dayrui XunRuiCMS Member View.php View sql injection

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-120347

The dayrui XunRuiCMS software, specifically versions up to 4.7.4 , contains a SQL injection vulnerability in the Member Module . The flaw exists within the View function of the file dayrui/Fcms/Core/View.php, where a manipulation of the catid argument allows for remote exploitation. The impact in...

EUVD-2026-115069

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2026-120347: dayrui XunRuiCMS: A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

PT-2026-135335

A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...

EUVD-2020-14206

Malware in sbrugna...

CVE-2022-43323

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Top Up Balance component under the Edit Member module...

CVE-2020-21434

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2022-44387

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Basic Information component under the Edit Member module...

CVE-2022-44387

CVE-2022-44387 affects EyouCMS v1.5.9-UTF8-SP1. A CSRF vulnerability exists in the Basic Information component of the Edit Member module, potentially allowing unauthorized actions to be performed on behalf of a user. Root cause is CSRF in that module. Remediation is recommended: implement CSRF to...

EyouCms Cross-Site Request Forgery Vulnerability

Zanzan Network Technology EyouCms Eyou CMS is an open source content management system CMS based on ThinkPHP by China Zanzan Network Technology. A security vulnerability exists in EyouCms version V1.5.9-UTF8-SP1, which originates from the inclusion of cross-site request forgery CSRF via the Basic...

CVE-2022-43323

EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery CSRF via the Top Up Balance component under the Edit Member module...

CVE-2020-21434

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2020-21434

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

Cross site scripting

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2020-21434

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2020-21434

CVE-2020-21434 affects Maccms 10. The vulnerability is a cross-site scripting (XSS) flaw in the Editing function under the Member module, exploitable via a crafted payload in the nickname field. Root cause: lack of proper input validation allowing script execution. Impact: client-side code execut...

PT-2021-10624

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: The issue is related to a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability can be exploited via a crafted payload in the nickname text field...

Maccms cross-site scripting vulnerabilities

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

CVE-2020-21434: Improper Neutralization of Input During Web Page Generation

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...