Threats tagged 'ghsa-rq2r-g99g-gxmf'

A SQL injection vulnerability exists in dayrui XunRuiCMS up to version 4.7.4 in the Member Module's View function. This flaw allows remote attackers to manipulate the 'catid' argument to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and public exploit code is available. Users should upgrade the affected component to a patched version identified by commit 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231.