Information disclosure

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2023-1681 Xunrui CMS test.php information disclosure

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2023-1681 Xunrui CMS test.php information disclosure

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public an...

CVE-2023-1681

CVE-2023-1681 affects Xunrui CMS 4.61, where an unknown function in the file /config/myfield/test.php enables information disclosure. The vulnerability is exploitable remotely and, per the provided documents, the exploit has been disclosed publicly. There is no explicit patched version or remedia...

PT-2023-17165 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A vulnerability has been found in an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. Recommendations: For...

PT-2023-17164 · Xunruicms · Xunruicms

Name of the Vulnerable Software and Affected Versions: Xunrui CMS version 4.61 Description: A problematic issue was found in the software, affecting an unknown function of the file /config/myfield/test.php. This leads to information disclosure and can be exploited remotely. Recommendations: For...

Xunrui CMS 安全漏洞

Xunrui Cloud Software Development XunRuiCMS Xunrui CMS is an open source content management system CMS from China's Xunrui Cloud Software Development Company. A security vulnerability exists in Xunrui CMS version 4.61, which originates from an unknown function in the /config/myfield/test.php file...

XunRuiCMS 跨站请求伪造漏洞

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China's XunRuiCloud Software Development Company. A security vulnerability exists in XunRuiCMS version V4.5.6, which originates from the presence of cross-site request forgery CSRF...

File Inclusion Vulnerability in Xunrui CMS

CMS is a content management framework based on CodeIgniter4. A file inclusion vulnerability exists in XunRui CMS, which can be exploited by attackers to execute code and gain control of the server...

File Upload Vulnerability in Xunrui CMS

CMS is a content management framework based on CodeIgniter4. A file upload vulnerability exists in XunRui CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Directory Traversal Vulnerability in Xunrui CMS 4.3.11 Backend

Xunrui CMS system is a free, simple, efficient and flexible PHP content management system. A directory traversal vulnerability exists in the backend of XunRui CMS 4.3.11, which can be exploited by an attacker to traverse the server's directory information with permissions...

Cross-site scripting vulnerability in Xunrui CMS version 4.3.8 (2020-06-01)

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China XunRuiCloud Software Development Company. A cross-site scripting vulnerability exists in XunRui CMS version 4.3.8 2020-06-01. The vulnerability stems from the lack of proper validation ...

Code Execution Vulnerability in Xunrui CMS

Xunrui CMS free open source system is based on PHP7 language using the latest CodeIgniter4 as the development framework for the production of web content management framework. XunRui CMS code execution vulnerabilities exist. An attacker can exploit the vulnerability to execute arbitrary code...

File Upload Vulnerability in CMS Ap***.php File

Xunrui CMS free open source system is based on PHP7 language using the latest CodeIgniter4 as the development framework for the production of web content management framework. XunRui CMS Ap.php file file upload vulnerability. Attackers can use the vulnerability to upload webshell, get server...

Command Execution Vulnerability in Xunrui CMS V4.3.4 at Sichuan Xunrui Cloud Software Development Co.

Xunrui CMS free open source system is based on PHP7 language using the latest CodeIgniter4 as the development framework for the production of web content management framework. Sichuan Xunrui Cloud Software Development Co., Ltd. Xunrui CMS V4.3.4 there is a command execution vulnerability, attacke...

Information Disclosure Vulnerability in Xunrui CMS v4.3.3 System

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. XunRui CMS v4.3.3 system...

Command Execution Vulnerability in Xunrui CMS (CNVD-2019-33541)

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. There is a command...

Directory Traversal Vulnerability in Xunrui CMS Backend Pages

Sichuan Xunruiyun Software Development Co., Ltd. is an Internet enterprise focusing on providing informatization services for small and medium-sized enterprises, mainly engaged in PHP language CMS website management system, offline communication and information engineering, online and offline...

Command Execution Vulnerability in CMS Co***.php File

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. A command execution...

Command Execution Vulnerability in Xunrui CMS

Xunrui CMS content management framework is based on PHP7 language using the latest CodeIgniter4 as a development framework for the production of web content management framework, providing "computer site + mobile site + APP interface" integrated web technology solutions. A command execution...