| शीर्षक | 四川迅睿云软件开发有限公司 XunruiCMS <=4.7.2 SQL Injection |
|---|
| विवरण | The backend interface of XunruiCMS 4.7, located at /admin*.php?s=member&c=home&m=group_all_edit, is vulnerable to SQL injection.
Root cause: The group_all_edit method, after obtaining parameters through post('groupid'), directly concatenates them into counts('member_group_index', 'uid='.$uid.' and gid='.$gid) without going through SQL parameter binding, only using an XSS filter. The underlying Model::counts() call invokes CodeIgniter 4's where($string) method with a single parameter. In this form, the value is null, and the framework skips the setBind() parameter binding process, directly compiling and executing the concatenated string as the original SQL statement. This allows attackers to inject arbitrary SQL statements through the groupid parameter. |
|---|
| स्रोत | ⚠️ https://github.com/FlyFish6-cloud/CVE/blob/main/XunruiCMS-SQL.md |
|---|
| उपयोगकर्ता | serend0ipity (UID 100365) |
|---|
| सबमिशन | 11/08/2026 04:10 PM (2 महीनों पहले) |
|---|
| संयम | 27/09/2026 01:36 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 410888 [dayrui XunruiCMS तक 4.7.2 Group Editing Home.php group_all_edit groupid SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|