Narcher

**Name of the Vulnerable Software and Affected Versions** YunaiV yudao-cloud versions prior to 2026.01 **Description** A security flaw has been discovered in YunaiV yudao-cloud. The issue affects an unknown part of the file `/admin-api/system/tenant/get-by-website`. Manipulation of the `Website` argument results in SQL injection. The attack can be launched remotely. The exploit has been publicly released. The vendor was contacted about this disclosure but did not respond. **Recommendations** Versions prior to 2026.01 should be updated. As a temporary workaround, restrict access to the `/admin-api/system/tenant/get-by-website` endpoint. Avoid using the `Website` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** YunaiV yudao-cloud versions prior to 2026.01 **Description** A weakness exists in YunaiV yudao-cloud. This issue involves the manipulation of the `toMail` argument within the file `/admin-api/system/mail-log/page`, leading to a SQL injection. The attack can be initiated remotely. The exploit has been made publicly available. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Versions prior to 2026.01: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChanCMS versions up to 3.3.2 **Description** A flaw exists in the `findField` function located in the `/cms/article/findField` file of ChanCMS. Manipulation of the `cid` argument can lead to a SQL injection. This issue can be exploited remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChanCMS versions up to 3.3.2 **Description** A flaw exists in the `update` function of the `/cms/article/update` file in ChanCMS. Manipulation of the `cid` argument can lead to SQL injection. The attack can be launched remotely. The exploit has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChanCMS versions up to 3.3.2 **Description** A flaw exists in ChanCMS that allows for SQL injection. The issue is related to the `hasUse` function within the `/cms/model/hasUse` file. Manipulation of the `ID` argument can lead to a successful exploit. The exploit has been publicly disclosed. **Recommendations** Versions prior to 3.3.2 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ChanCMS versions up to 3.3.2 **Description** A code injection issue exists in the `getArticle` function of the `appmodulescmscontrollergather.js` file. This allows for remote attacks. The exploit for this issue has been publicly released. **Recommendations** Update ChanCMS to a version later than 3.3.2. As a temporary workaround, consider restricting access to the `gather.js` file or disabling the `getArticle` function until a patch is available.