CVE-2023-1681

Published: Mar 28, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224238 is the identifier assigned to this vulnerability.

Affected (1)

Products: Xunruicms: Xunruicms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xunruicms Xunruicms	Version 4.6.1

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md

Source: cna@vuldb.com

Exploit

https://vuldb.com/?ctiid.224238

Source: cna@vuldb.com

Third Party Advisory

https://vuldb.com/?id.224238

Source: cna@vuldb.com

Third Party Advisory

https://github.com/2714925725/CMS-bug/blob/main/Informationdisclosure-1.md

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://vuldb.com/?ctiid.224238

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vuldb.com/?id.224238

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.