yanyutao0402

Products

ProductCVEsExploitedLatest
ChanCMS14–Oct 17, 2025

Exploited and recent CVEs

  • CVE-2025-11905 Medium 6.3 yanyutao0402 ChanCMS gather.js getArticle code injection 0.8%
  • CVE-2025-11904 Medium 6.3 yanyutao0402 ChanCMS hasUse sql injection 0.6%
  • CVE-2025-11903 Medium 6.3 yanyutao0402 ChanCMS update sql injection 0.6%
  • CVE-2025-11902 Medium 6.3 yanyutao0402 ChanCMS findField sql injection 0.6%
  • CVE-2025-10211 Medium 6.3 yanyutao0402 ChanCMS getArticle CollectController server-side request forgery 0.7%
  • CVE-2025-10210 Medium 6.3 yanyutao0402 ChanCMS Api.js search sql injection 1.3%
  • CVE-2025-10106 Medium 6.3 yanyutao0402 ChanCMS search sql injection 0.4%
  • CVE-2025-10105 Medium 6.3 yanyutao0402 ChanCMS search sql injection 0.3%
  • CVE-2025-8266 Medium 6.3 yanyutao0402 ChanCMS collect.js getArticle deserialization 1.1%
  • CVE-2025-8228 Medium 6.3 yanyutao0402 ChanCMS getPages server-side request forgery 0.7%
  • CVE-2025-8227 Medium 6.3 yanyutao0402 ChanCMS getArticle deserialization 0.7%
  • CVE-2025-8226 Medium 4.3 yanyutao0402 ChanCMS find information disclosure 0.7%
  • CVE-2025-8133 Medium 6.3 yanyutao0402 ChanCMS gather.js getArticle server-side request forgery 0.4%
  • CVE-2025-8132 Medium 5.4 yanyutao0402 ChanCMS utils.js delfile path traversal 0.7%