CVE-2023-1682mediumCWE-425

CVE-2023-1682: medium-severity vulnerability in Xunrui CMS

Xunrui CMS Install.txt direct request

Published · Updated

Follow this CVE+ Monitor CMS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.7%
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Xunrui · CMS
Related CVEs — Xunrui CMS

In the same product, most dangerous first.

CVE-2023-1681MEDIUMXunrui CMS test.php information disclosureEPSS 0.8%CVE-2023-1680MEDIUMXunrui CMS main.html information disclosureEPSS 0.8%CVE-2023-1683MEDIUMXunrui CMS system_log.html information disclosureEPSS 0.5%