173 matches found
XunRuiCMS 代码问题漏洞
XunRuiCMS XunRuiCMS is a content management system for individual developers of XunRuiCMS. A code issue vulnerability exists in XunRuiCMS version 4.6.4 and prior versions, which stems from a deserialization issue contained in the thumb parameter of /Control/Api/Api.php...
CVE-2025-1177
A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function importadd of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2025-1177 dayrui XunRuiCMS Linkage.php import_add deserialization
A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function importadd of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2025-1177 dayrui XunRuiCMS Linkage.php import_add deserialization
A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function importadd of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2025-1177
Dayrui XunRuiCMS 4.6.3 is affected by a deserialization vulnerability in the import_add function of dayrui/Fcms/Control/Admin/Linkage.php. The issue enables remote exploitation and has been publicly disclosed. Public sources consistently identify this as a critical flaw with potential for remote ...
CVE-2025-1177 dayrui XunRuiCMS Linkage.php import_add deserialization
A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function importadd of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to...
PT-2025-6162 · Dayrui · Xunruicms
Name of the Vulnerable Software and Affected Versions: dayrui XunRuiCMS version 4.6.3 Description: A critical issue was found in dayrui XunRuiCMS, affecting the import add function of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization, and it is possible to...
XunRuiCMS 代码问题漏洞
XunRuiCMS XunRuiCMS is a content management system for individual developers of XunRuiCMS. A code issue vulnerability exists in XunRuiCMS version 4.6.3, which originates from the importadd function in file dayrui/Fcms/Control/Admin/Linkage.php that causes deserialization...
PT-2025-6104 · Dayrui · Xunruicms
Name of the Vulnerable Software and Affected Versions: dayrui XunRuiCMS versions up to 4.6.4 Description: A critical issue has been identified, affecting unknown code in the /Control/Api/Api.php file. The manipulation of the thumb argument leads to deserialization. This issue can be exploited...
Denial of Service Vulnerability in XunRuiCMS of Sichuan Xunruiyun Software Development Co.
XunRuiCMS is a content management framework based on CodeIgniter4. Sichuan XunRuiCloud Software Development Co., Ltd. XunRuiCMS has a denial-of-service vulnerability that can be exploited by an attacker to cause the contents of a file to be emptied, resulting in a denial of service...
CVE-2024-31634
Cross Site Scripting XSS vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library...
CVE-2024-31634
Cross Site Scripting XSS vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library...
CVE-2024-31634
Cross Site Scripting XSS vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library...
CVE-2024-31634
CVE-2024-31634 is a reported XSS in Xunruicms 4.6.3 and earlier, enabling a remote attacker to execute arbitrary code via the Security.php file located in the catalog \XunRuiCMS\dayrui\Fcms\Library. The Red Hat/NVD entries corroborate the same description. Affected component: Security.php in Xunr...
XunRuiCMS 安全漏洞
Xunrui Cloud Software Development XunRuiCMS Xunrui CMS is an open source content management system CMS from China's Xunrui Cloud Software Development Company. A security vulnerability exists in Xunrui CMS 4.6.3 and earlier versions, which originates from a cross-site scripting XSS vulnerability i...
CVE-2024-31634
Cross Site Scripting XSS vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \XunRuiCMS\dayrui\Fcms\Library...
PT-2024-24170 · Xunruicms · Xunruicms
Name of the Vulnerable Software and Affected Versions: Xunruicms versions 4.6.3 and before Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the Security.php file in the catalog XunRuiCMSdayruiFcmsLibrary. This enables the attacker to perform...
CVE-2024-24389
A cross-site scripting XSS vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter...
CVE-2024-24389
A cross-site scripting XSS vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter...
