(CVE-2025-10210) ChanCMS Search功能SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-10210
• https://access.redhat.com/security/cve/cve-2025-10210
• https://www.kodemsecurity.com/cve-database/cve-2025-10210
• https://attackerkb.com/topics/Iza40rxsRp/cve-2025-10210
• https://vuldb.com/?id.323076
• https://github.com/chujianxin0101/vuln/issues/9
• https://github.com/chujianxin0101/vuln/issues/8
• https://vulnerability.circl.lu/vuln/cnvd-2025-21446

Related Vulnerabilities

• PoCCVE-2026-59509: cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection
• ChanCMS SQL注入漏洞（CVE-2025-10210）
• Cloudreve网盘 /api/v3/share/search 未授权访问漏洞
• Piwigo /ws.php pwg.history.search 未授权访问漏洞（CVE-2026-27833）
• WordPress WP-Advanced-Search /autocompletion-PHP5.5.php SQL 注入漏洞（CVE-2024-9796）
• MLflow /ajax-api/3.0/jobs/search 权限绕过漏洞 （CVE-2026-2652）
• 深信服运维安全管理系统 /fort/login/search_login 信息泄露漏洞
• SillyTavern /api/search/searxng 服务器端请求伪造漏洞（CVE-2026-46372）
• 用友KSOA search_list.jsp 存在sql注入漏洞
• PoCCVE-2026-42031: CKAN DataStore SQL Search - SQL Injection
• CKAN /api/action/datastore_search_sql SQL 注入漏洞（CVE-2026-42031）
• 用友NC Cloud /ncchr/pm/ref/indiIssued/blobRefClassSearch 代码执行漏洞
• PoCCVE-2025-71258: BMC FootPrints 'searchWeb' - Server-Side Request Forgery