| عنوان | Xunrui CMS content system V4.61There is an information leak. |
|---|
| الوصف | In the content system V4.61 of Xunrui CMS, a bug was found that Guilei thought was problematic, but the components affected by the bug were
/dayrui/Fcms/View/system_log.html
/dayrui/Fcms/Temp/Web/mobile/api.php
/dayrui/My/View/main.html
/dayrui/My/Config/Install.txt
Users who enter the path can directly see sensitive information. This attack can be launched remotely.It will not be used or misused, and the user can control the path of the input cover, which will affect the integrity of the whole program. |
|---|
| المصدر | ⚠️ https://github.com/2714925725/CMS-bug/blob/main/Information disclosure-1.md |
|---|
| المستخدم | mengleng (UID 43260) |
|---|
| ارسال | 26/03/2023 12:46 AM (4 سنوات منذ) |
|---|
| الاعتدال | 28/03/2023 10:22 PM (3 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 224240 [Xunrui CMS 4.61 system_log.html الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|