232 matches found
CVE-2026-120349
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function strreplace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
CVE-2026-120348
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
CVE-2026-120347
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...
EUVD-2026-115071
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function strreplace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
CVE-2026-120349 dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function strreplace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
CVE-2026-120349
A security flaw exists in dayrui XunRuiCMS up to version 4.7.4 within the Mobile Site Directory component. The vulnerability is located in the str_replace function of the file /var/www/html/zzmob/index.php, where manipulating the dirname argument leads to code injection . This flaw can be exploit...
CVE-2026-120349 dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function strreplace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
CVE-2026-120348
A code injection vulnerability exists in dayrui XunRuiCMS versions up to 4.7.4 . The flaw is located within the _get_tpl_content function of the file dayrui/Fcms/Library/Notice.php inside the Email Template Rendering component. This vulnerability allows for remote code injection , and an exploit ...
CVE-2026-120348 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
CVE-2026-120348 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
EUVD-2026-115070
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
EUVD-2026-115069
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2026-120347
The dayrui XunRuiCMS software, specifically versions up to 4.7.4 , contains a SQL injection vulnerability in the Member Module . The flaw exists within the View function of the file dayrui/Fcms/Core/View.php, where a manipulation of the catid argument allows for remote exploitation. The impact in...
CVE-2026-120347 dayrui XunRuiCMS Member View.php View sql injection
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...
PT-2026-135336
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function get tpl content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
CVE-2026-120348: dayrui XunRuiCMS: A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function gettplcontent of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The attack can be initiated remotely. The...
PT-2026-135338
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
CVE-2026-120349: dayrui XunRuiCMS: A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function strreplace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched...
PT-2026-135335
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2026-120347: dayrui XunRuiCMS: A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit h...