Narcher

A security flaw has been discovered in YunaiV yudao-cloud. The issue affects an unknown part of the file `/admin-api/system/tenant/get-by-website`. Manipulation of the `Website` argument results in SQL injection. The attack can be launched remotely. The exploit has been publicly released. The vendor was contacted about this disclosure but did not respond.

A weakness exists in YunaiV yudao-cloud. This issue involves the manipulation of the `toMail` argument within the file `/admin-api/system/mail-log/page`, leading to a SQL injection. The attack can be initiated remotely. The exploit has been made publicly available. The vendor was contacted regarding this disclosure but did not respond.

Existe uma falha na função `findField` localizada no arquivo `/cms/article/findField` do ChanCMS. A manipulação do argumento `cid` pode levar a uma injeção de SQL. Este problema pode ser explorado remotamente.

Existe uma falha na função `update` do arquivo `/cms/article/update` no ChanCMS. A manipulação do argumento `cid` pode resultar em injeção de SQL. O ataque pode ser executado remotamente. O exploit foi publicado.

A flaw exists in ChanCMS that allows for SQL injection. The issue is related to the `hasUse` function within the `/cms/model/hasUse` file. Manipulation of the `ID` argument can lead to a successful exploit. The exploit has been publicly disclosed.

Existe uma falha de injeção de código na função `getArticle` do arquivo `appmodulescmscontrollergather.js`. Isso permite ataques remotos. O exploit para esta falha foi disponibilizado publicamente.