PT-2025-30728 · Chancms · Chancms

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions up to 3.1.2 Description: A path traversal issue exists in the delfile function of the app/extend/utils.js file. This issue may be exploited remotely. The exploit has been publicly disclosed. Recommendations:...

PT-2025-30729 · Chancms · Chancms

Name of the Vulnerable Software and Affected Versions: ChanCMS versions up to 3.1.2 Description: A critical issue exists in ChanCMS that allows for server-side request forgery. The getArticle function within the app/modules/api/service/gather.js file is susceptible to manipulation via the targetU...