| タイトル | Xunrui CMS content system V4.61There is an information leak. |
|---|
| 説明 | In the content system V4.61 of Xunrui CMS, a bug was found that Guilei thought was problematic, but the components affected by the bug were
/dayrui/Fcms/View/system_log.html
/dayrui/Fcms/Temp/Web/mobile/api.php
/dayrui/My/View/main.html
/dayrui/My/Config/Install.txt
Users who enter the path can directly see sensitive information. This attack can be launched remotely.It will not be used or misused, and the user can control the path of the input cover, which will affect the integrity of the whole program. |
|---|
| ソース | ⚠️ https://github.com/2714925725/CMS-bug/blob/main/Information disclosure-1.md |
|---|
| ユーザー | mengleng (UID 43260) |
|---|
| 送信 | 2023年03月26日 00:46 (4 年 ago) |
|---|
| モデレーション | 2023年03月28日 22:22 (3 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 224240 [Xunrui CMS 4.61 system_log.html 情報漏えい] |
|---|
| ポイント | 20 |
|---|