CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120349
HIGHCVSS 7.3NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code injection. The attack can be launched rem
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog