إرسال #495820: 四川迅睿云软件开发有限公司 迅睿CMS <=4.6.4 (2024-12-17) Remote Code Executeالمعلومات

عنوان四川迅睿云软件开发有限公司 迅睿CMS <=4.6.4 (2024-12-17) Remote Code Execute
الوصفXunRuiCMS is a PHP website content management system licensed under the MIT open-source protocol, supporting multiple core modes. XunRuiCMS v4.6.3 and earlier versions have a frontend command execution vulnerability. Remote attackers can exploit this vulnerability to gain server access, potentially leading to server compromise.
المصدر⚠️ https://github.com/pwysec/d6qRhl/blob/main/1.pdf
المستخدم
 p1wy (UID 75818)
ارسال06/02/2025 07:27 AM (2 سنوات منذ)
الاعتدال10/02/2025 12:15 PM (4 days later)
الحالةتمت الموافقة
إدخال VulDB295090 [dayrui XunRuiCMS حتى 4.6.4 /Control/Api/Api.php thumb تجاوز الصلاحيات]
النقاط18

Do you want to use VulDB in your project?

Use the official API to access entries easily!