CVE-2023-1682

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-425

Affected software

VendorProductVersions
XunruiCMS4.61

References

Timeline

Published
Mar 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-16837.5A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the fileCVE-2023-16849.8A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.phpCVE-2023-16857.2A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /insCVE-2023-16866.1A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects soCVE-2023-16876.1A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown functioCVE-2023-16886.1A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown parCVE-2023-16896.1A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknoCVE-2023-16906.1A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affeCVE-2023-16917.5Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause featCVE-2023-16927.5The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.CVE-2023-16937.5The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentialityCVE-2023-16947.5The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality
CVE-2023-1682: High severity, CVSS 7.5 | Vulnix