CVE-2026-120347High· 7.3▾ TwilightA vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection.…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231. The affected component should be upgraded.
XunRuiCMS 4.7.0XunRuiCMS 4.7.1XunRuiCMS 4.7.2XunRuiCMS 4.7.3XunRuiCMS 4.7.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-101018Medium· 4.7A vulnerability was determined in dayrui XunruiCMS up to 4.7.2
CVE-2026-120348High· 7.3dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection
CVE-2026-120349High· 7.3dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection
CVE-2025-11342Medium· 4.7A weakness has been identified in code-projects Online Course Registration 1.0
CVE-2025-11343High· 7.3A security vulnerability has been detected in code-projects Student Crud Operation 3.3
CVE-2025-11317High· 7.3A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0