Narcher

A security flaw has been discovered in YunaiV yudao-cloud. The issue affects an unknown part of the file `/admin-api/system/tenant/get-by-website`. Manipulation of the `Website` argument results in SQL injection. The attack can be launched remotely. The exploit has been publicly released. The vendor was contacted about this disclosure but did not respond.

A weakness exists in YunaiV yudao-cloud. This issue involves the manipulation of the `toMail` argument within the file `/admin-api/system/mail-log/page`, leading to a SQL injection. The attack can be initiated remotely. The exploit has been made publicly available. The vendor was contacted regarding this disclosure but did not respond.

A flaw exists in the `findField` function located in the `/cms/article/findField` file of ChanCMS. Manipulation of the `cid` argument can lead to a SQL injection. This issue can be exploited remotely.

A flaw exists in the `update` function of the `/cms/article/update` file in ChanCMS. Manipulation of the `cid` argument can lead to SQL injection. The attack can be launched remotely. The exploit has been published.

A flaw exists in ChanCMS that allows for SQL injection. The issue is related to the `hasUse` function within the `/cms/model/hasUse` file. Manipulation of the `ID` argument can lead to a successful exploit. The exploit has been publicly disclosed.

A code injection issue exists in the `getArticle` function of the `appmodulescmscontrollergather.js` file. This allows for remote attacks. The exploit for this issue has been publicly released.