xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request.
References
| Link | Resource |
|---|---|
| https://github.com/P0wfuu/xunruicms-RCE | Exploit Third Party Advisory |
| https://github.com/P0wfuu/xunruicms-RCE | Exploit Third Party Advisory |
Configurations
History
18 Jun 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
21 Nov 2024, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/P0wfuu/xunruicms-RCE - Exploit, Third Party Advisory |
07 Mar 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request. |
27 Sep 2023, 18:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/P0wfuu/xunruicms-RCE - Exploit, Third Party Advisory | |
| First Time |
Xunruicms
Xunruicms xunruicms |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:xunruicms:xunruicms:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-noinfo |
27 Sep 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-27 15:15
Updated : 2025-06-18 15:15
NVD link : CVE-2021-38243
Mitre link : CVE-2021-38243
CVE.ORG link : CVE-2021-38243
JSON object : View
Products Affected
xunruicms
- xunruicms
CWE