TI-2025-09278 CVE-2025-10105 · GHSA-8wwh-ch83-69x8
yanyutao0402 ChanCMS search sql injection
Priority HIGH 65
A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1.
yanyutao0402
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
yanyutao0402 records in CISA KEVNo yanyutao0402 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records
TI-2025-10916 CVE-2025-11905 · GHSA-3f28-8p95-qq7j
yanyutao0402 ChanCMS gather.js getArticle code injection
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2.
TI-2025-10915 CVE-2025-11904 · GHSA-fx4v-ph3m-v95w
yanyutao0402 ChanCMS hasUse sql injection
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2.
TI-2025-10914 CVE-2025-11903 · GHSA-gjwh-8789-cf44
yanyutao0402 ChanCMS update sql injection
Priority MEDIUM 57
A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2.
TI-2025-10913 CVE-2025-11902 · GHSA-8vpm-mj42-4fmj
yanyutao0402 ChanCMS findField sql injection
Priority MEDIUM 57
A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2.
TI-2025-09373 CVE-2025-10211 · GHSA-2f88-7653-v86f
yanyutao0402 ChanCMS getArticle CollectController server-side request forgery
Priority MEDIUM 57
A security vulnerability has been detected in yanyutao0402 ChanCMS 3.3.0.
TI-2025-09372 CVE-2025-10210 · GHSA-q3rj-r9m2-hfg4
yanyutao0402 ChanCMS Api.js search sql injection
Priority MEDIUM 57
A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0.
TI-2025-09283 CVE-2025-10110 · GHSA-5rjx-x4ch-7q8j
ChanCMS search sql injection
Priority MEDIUM 57
A vulnerability was identified in ChanCMS up to 3.3.1.
TI-2025-09279 CVE-2025-10106 · GHSA-p259-xm9c-xxq5
yanyutao0402 ChanCMS search sql injection
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1.
TI-2025-07565 CVE-2025-8266 · GHSA-pg2f-hfwm-m7g5
yanyutao0402 ChanCMS collect.js getArticle deserialization
Priority MEDIUM 57
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical.
TI-2025-07528 CVE-2025-8228 · GHSA-43hh-wmr7-r7rm
yanyutao0402 ChanCMS getPages server-side request forgery
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
TI-2025-07527 CVE-2025-8227 · GHSA-fjrg-q598-j558
yanyutao0402 ChanCMS getArticle deserialization
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
TI-2025-07526 CVE-2025-8226 · GHSA-pwfh-569f-rxh7
yanyutao0402 ChanCMS find information disclosure
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
TI-2025-07439 CVE-2025-8133 · GHSA-wxq5-cqj8-p4vx
yanyutao0402 ChanCMS gather.js getArticle server-side request forgery
Priority MEDIUM 57
A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2.
TI-2025-07438 CVE-2025-8132 · GHSA-9652-rq4r-3qr4
yanyutao0402 ChanCMS utils.js delfile path traversal
Priority MEDIUM 57
A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2.
TI-2025-40409 CVE-2025-65602 · GHSA-374c-2pvv-fxf5
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4…
Priority MEDIUM 50
A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.