The vulnerability is in the View function of dayrui/Fcms/Core/View.php in the Member module of XunRuiCMS. By manipulating the catid argument, an attacker can inject arbitrary SQL, enabling remote data extraction or modification. The flaw is a classic SQL injection described by CWE-89, with the specific issue of input not being validated, identified as CWE-74. The impact includes potential compromise of confidentiality and integrity of the database data, and may allow an attacker to gain unauthorized access to sensitive member information.

The affected product is dayrui XunRuiCMS, with all versions up to and including 4.7.4 susceptible. The vendor is dayrui, and the component identified is the Member module’s View.php file.

With a CVSS score of 6.9, the vulnerability falls into the medium severity range. The exploit is remote, with no local privilege requirement. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, indicating that it has not yet led to widespread exploitation. However, the public disclosure and the presence of a known exploitable patch code commit suggest that an attacker could attempt exploitation if the system remains unpatched.