ChanCMS SQL Injection Vulnerability in Search Function

A SQL injection vulnerability has been identified in ChanCMS versions through 3.3.1. The issue arises in the search interface, where input manipulation can lead to unauthorized database access. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries. This could lead to unauthorized data access, data modification, or in some cases, executing commands on the server via database command execution features.

Reproduction

To reproduce this vulnerability, log into ChanCMS with the default credentials (username: 'chancms', password: '123456'). Once logged in, navigate to the search interface and input the crafted SQL injection payload. This will trigger the vulnerability by exploiting the application's SQL query handling.