CVE-2021-3256

KuaiFanCMS V5.x has an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. The issue stems from the html_url parameter handling in that module, allowing an attacker to read arbitrary files and potentially obtain sensitive information. Multiple sources (C...

CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the htmlurl parameter of the chakanhtml.module.php file...