CVE-2025-10106

CVE-2025-10106 affects yanyutao0402 ChanCMS up to version 3.3.1. The vulnerability resides in an unknown part of the file /cms/collect/search, where manipulating the keyword parameter enables SQL injection. The issue is exploitable remotely and the exploit has been publicly disclosed. Multiple co...