Xunruicms vulnerabilities
We track 5 vulnerabilities in Xunruicms products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 29, 2023.
Latest Xunruicms vulnerabilities
- 7.5 High severity
CMS: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to information disclosure. The attack may be initiated remotely. T
- 7.5 High severity
CMS: Cleartext Storage of Sensitive Information
A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotel
- 7.5 High severity
CMS: Direct Request
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely
- 7.5 High severity
CMS: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploi
- 7.2 High severity
Xunruicms: Inclusion of Functionality from Untrusted Control Sphere
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.