（CVE-2025-10211）ChanCMS 3.3.0 CollectController SSRF漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-10211
• https://cve.imfht.com/detail/CVE-2025-10211
• https://avd.aliyun.com/detail?id=AVD-2025-10211
• https://vuldb.com/zh/?id.323484
• https://github.com/projectdiscovery/nuclei-templates/issues/14064
• https://github.com/advisories/GHSA-2f88-7653-v86f
• https://pentest-tools.com/vulnerabilities-exploits/chancms-330-server-side-request-forgery_28236
• https://www.cve.org/CVERecord?id=CVE-2025-10211
• https://access.redhat.com/security/cve/cve-2025-10211
• https://www.joramwolters.com/exploit-829-cve-2025-10211/

Related Vulnerabilities

• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCCVE-2020-29134: TOTVS Fluig <= 1.7.0 - Arbitrary File Read
• PoCCVE-2023-54391: Proxmox VE - Default Credentials with TFA Bypass
• PoCCVE-2025-51683: mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE
• PoCCVE-2025-57231: Docmost 0.2.1-0.21.0 - Arbitrary File Read
• PoCCVE-2026-19632: TranslatePress <= 3.3.1 - Unauthenticated Account Takeover
• PoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code Execution
• PoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp Proxy
• PoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting
• PoCCVE-2026-28411: WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()
• PoCCVE-2026-29963: HSC MailInspector - Unauthenticated Arbitrary File Read
• PoCCVE-2026-30849: MantisBT < 2.28.1 - SOAP API Authentication Bypass
• PoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code Execution