Advisories · Technology
yanyutao0402 ChanCMS.
Every CVE that names yanyutao0402 ChanCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
yanyutao0402 ChanCMS gather.js getArticle code injection
- yanyutao0402 ChanCMS
- Other injection
- Code injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS hasUse sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS update sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS findField sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS getArticle CollectController server-side request forgery
- yanyutao0402 ChanCMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
yanyutao0402 ChanCMS Api.js search sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS search sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS search sql injection
- yanyutao0402 ChanCMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
yanyutao0402 ChanCMS collect.js getArticle deserialization
- yanyutao0402 ChanCMS
- Insecure deserialization
- CWE-20
- CVSS 5.3 Medium
yanyutao0402 ChanCMS getPages server-side request forgery
- yanyutao0402 ChanCMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
yanyutao0402 ChanCMS getArticle deserialization
- yanyutao0402 ChanCMS
- Insecure deserialization
- CWE-20
- CVSS 5.3 Medium
yanyutao0402 ChanCMS find information disclosure
- yanyutao0402 ChanCMS
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
yanyutao0402 ChanCMS gather.js getArticle server-side request forgery
- yanyutao0402 ChanCMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
yanyutao0402 ChanCMS utils.js delfile path traversal
- yanyutao0402 ChanCMS
- Path traversal