Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

ChanCMS — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in ChanCMS, with AI-generated Chinese analysis, references, and POCs.

Vendor: yanyutao0402

CVE IDTitleCVSSSeverityPublished
CVE-2025-11905 yanyutao0402 ChanCMS gather.js getArticle code injection CWE-94 6.3 Medium2025-10-17
CVE-2025-11904 yanyutao0402 ChanCMS hasUse sql injection CWE-89 6.3 Medium2025-10-17
CVE-2025-11903 yanyutao0402 ChanCMS update sql injection CWE-89 6.3 Medium2025-10-17
CVE-2025-11902 yanyutao0402 ChanCMS findField sql injection CWE-89 6.3 Medium2025-10-17
CVE-2025-10211 yanyutao0402 ChanCMS getArticle CollectController server-side request forgery CWE-918 6.3 Medium2025-09-10
CVE-2025-10210 yanyutao0402 ChanCMS Api.js search sql injection CWE-89 6.3 Medium2025-09-10
CVE-2025-10110 ChanCMS search sql injection CWE-89 6.3 Medium2025-09-08
CVE-2025-10106 yanyutao0402 ChanCMS search sql injection CWE-89 6.3 Medium2025-09-08
CVE-2025-10105 yanyutao0402 ChanCMS search sql injection CWE-89 6.3 Medium2025-09-08
CVE-2025-8266 yanyutao0402 ChanCMS collect.js getArticle deserialization CWE-502 6.3 Medium2025-07-28
CVE-2025-8228 yanyutao0402 ChanCMS getPages server-side request forgery CWE-918 6.3 Medium2025-07-27
CVE-2025-8227 yanyutao0402 ChanCMS getArticle deserialization CWE-502 6.3 Medium2025-07-27
CVE-2025-8226 yanyutao0402 ChanCMS find information disclosure CWE-200 4.3 Medium2025-07-27
CVE-2025-8133 yanyutao0402 ChanCMS gather.js getArticle server-side request forgery CWE-918 6.3 Medium2025-07-25
CVE-2025-8132 yanyutao0402 ChanCMS utils.js delfile path traversal CWE-22 5.4 Medium2025-07-25

All 15 known CVE vulnerabilities affecting ChanCMS with full Chinese analysis, references, and POCs where available.