Submit #645383: https://gitee.com/chancms/ChanCMS ChanCMS 3.3.1 SQL Injection

The /search/'%20or%201=1%20%23/words.html interface in the ChanCMS master branch (corresponding to version 3.3.1) has a SQL injection vulnerability.

• Source: ⚠️ https://github.com/chujianxin0101/vuln/issues/10
• User: Unnlucky1 (UID 83350)
• Submission: 09/01/2025 11:44 (9 months ago)
• Moderation: 09/08/2025 16:15 (7 days later)
• Status: Accepted
• VulDB entry: 323076 [ChanCMS up to 3.3.1 /search/ sql injection]
• Points: 15