CVE-2025-11903: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cms/article/update. Executing a manipulation of the argument cid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Th...

PT-2025-42598

Name of the Vulnerable Software and Affected Versions ChanCMS versions up to 3.3.2 Description A flaw exists in the update function of the /cms/article/update file in ChanCMS. Manipulation of the cid argument can lead to SQL injection. The attack can be launched remotely. The exploit has been...