Ddayrui

Products

Exploited and recent CVEs

• CVE-2026-120349 High 7.3 dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection 0.3%
• CVE-2026-120348 High 7.3 dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection 0.3%
• CVE-2026-120347 High 7.3 dayrui XunRuiCMS Member View.php View sql injection 0.3%
• CVE-2026-101018 Medium 4.7 dayrui XunruiCMS Group Editing Home.php group_all_edit sql injection 0.2%
• CVE-2025-15144 Medium 4.3 dayrui XunRuiCMS JSONP Callback Init.php dr_exit_msg cross site scripting 0.4%
• CVE-2025-14008 Medium 4.7 dayrui XunRuiCMS Project Domain Change Test admin79f2ec220c7e.php server-side request forgery 0.4%
• CVE-2025-14007 Low 2.0 dayrui XunRuiCMS Domain Name Binding admin79f2ec220c7e.php cross site scripting 0.3%
• CVE-2025-14006 Low 3.5 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting 0.3%
• CVE-2025-14005 Low 2.4 dayrui XunRuiCMS Add Display Name Field admind45f74adbd95.php cross site scripting 0.3%
• CVE-2025-14004 Medium 4.7 dayrui XunRuiCMS Email Setting admind45f74adbd95.php server-side request forgery 0.5%
• CVE-2025-2131 Low 2.4 dayrui XunRuiCMS Friendly Links cross site scripting 0.3%
• CVE-2025-1186 Medium 6.3 dayrui XunRuiCMS Api.php deserialization 0.7%
• CVE-2025-1177 Medium 6.3 dayrui XunRuiCMS Linkage.php import_add deserialization 0.7%