CVE-2025-8132

CVE-2025-8132 affects ChanCMS up to version 3.1.2. The vulnerability is a path traversal in the delfile function of app/extend/utils.js, enabling remote exploitation. Public exploit details exist, and upgrading to version 3.1.3 addresses the issue. The recommended patch identifier is c8a282bf02a6...

CVE-2025-8132 yanyutao0402 ChanCMS utils.js delfile path traversal

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function delfile of the file app/extend/utils.js. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public...

ChanCMS 安全漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. A security vulnerability exists in ChanCMS 3.1.2 and earlier versions, which originates from the incorrect operation of the function getArticle on the parameter targetUrl in the file...

ChanCMS 安全漏洞

ChanCMS is a content management system by yanyutao0402 individual developer in China. A security vulnerability exists in ChanCMS 3.1.2 and earlier versions, which originates from a path traversal due to a misbehavior of the function delfile in the file app/extend/utils.js...

PT-2025-30729 · Chancms · Chancms

Name of the Vulnerable Software and Affected Versions: ChanCMS versions up to 3.1.2 Description: A critical issue exists in ChanCMS that allows for server-side request forgery. The getArticle function within the app/modules/api/service/gather.js file is susceptible to manipulation via the targetU...

PT-2025-30728 · Chancms · Chancms

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions up to 3.1.2 Description: A path traversal issue exists in the delfile function of the app/extend/utils.js file. This issue may be exploited remotely. The exploit has been publicly disclosed. Recommendations:...