| 标题 | Xunrui CMS content system V4.61There is an information leak. |
|---|
| 描述 | In the content system V4.61 of Xunrui CMS, a bug was found that Guilei thought was problematic, but the components affected by the bug were
/dayrui/Fcms/View/system_log.html
/dayrui/Fcms/Temp/Web/mobile/api.php
/dayrui/My/View/main.html
/dayrui/My/Config/Install.txt
Users who enter the path can directly see sensitive information. This attack can be launched remotely.It will not be used or misused, and the user can control the path of the input cover, which will affect the integrity of the whole program. |
|---|
| 来源 | ⚠️ https://github.com/2714925725/CMS-bug/blob/main/Information disclosure-1.md |
|---|
| 用户 | mengleng (UID 43260) |
|---|
| 提交 | 2023-03-26 00時46分 (4 年前) |
|---|
| 管理 | 2023-03-28 22時22分 (3 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 224240 [Xunrui CMS 4.61 system_log.html 信息公开] |
|---|
| 积分 | 20 |
|---|