Advisories · Technology
dayrui XunRuiCMS.
Every CVE that names dayrui XunRuiCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection
- dayrui XunRuiCMS
- Other injection
- Code injection
- CVSS 6.9 Medium
dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection
- dayrui XunRuiCMS
- Other injection
- Code injection
- CVSS 6.9 Medium
dayrui XunRuiCMS Member View.php View sql injection
- dayrui XunRuiCMS
- Other injection
- SQL injection
- CVSS 5.1 Medium
dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection
- dayrui XunruiCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting
- dayrui XunRuiCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery
- dayrui XunRuiCMS
- Server-side request forgery (SSRF)
- CVSS 2.0 Low
dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting
- dayrui XunRuiCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting
- dayrui XunRuiCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting
- dayrui XunRuiCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery
- dayrui XunRuiCMS
- Server-side request forgery (SSRF)
- CVSS 4.8 Medium
dayrui XunRuiCMS Friendly Links cross site scripting
- dayrui XunRuiCMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
dayrui XunRuiCMS Api.php deserialization
- dayrui XunRuiCMS
- Insecure deserialization
- CWE-20
- CVSS 5.3 Medium
dayrui XunRuiCMS Linkage.php import_add deserialization
- dayrui XunRuiCMS
- Insecure deserialization
- CWE-20