CVE-2025-1177

Medium CVSS: 5.3

A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Vendor

Xunruicms

Product

Xunruicms

CWE

CWE-20

Yayın Tarihi

2025-02-11 06:15:22

Güncelleme

2025-02-20 15:58:50

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-20 Xunruicms MEDIUM Xunruicms 2025

Referanslar

https://github.com/stevenchen0x01/CVE2/blob/main/cve2.md https://vuldb.com/?ctiid.295080 https://vuldb.com/?id.295080 https://vuldb.com/?submit.495366

Benzer Kayıtlar

Medium

CVE-2025-15144

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. The impacted element is the function dr_show_error/dr_ex…

Medium

CVE-2025-14008

A flaw has been found in dayrui XunRuiCMS up to 4.7.1. This vulnerability affects unknown code of the file admin79f2ec22…

Medium

CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown funct…

Low

CVE-2025-14007

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7…

Medium

CVE-2025-14004

A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1. Affected is an unknown function of the file /admind…

Medium

CVE-2025-14005

A weakness has been identified in dayrui XunRuiCMS up to 4.7.1. Affected by this vulnerability is an unknown functionali…