CVE-2021-3256

KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.

• CWE-88

• https://github.com/poropro/kuaifan/issues/3Exploit, Issue Tracking, Third Party Advisory
• https://github.com/poropro/kuaifan/issues/3Exploit, Issue Tracking, Third Party Advisory

Published

Jun 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32554It was discovered that read_file() in apport/hookutils.py wo…5.5
• CVE-2021-32555It was discovered that read_file() in apport/hookutils.py wo…5.5
• CVE-2021-32556It was discovered that the get_modified_conffiles() function…3.3
• CVE-2021-32557It was discovered that the process_report() function in data…7.1
• CVE-2021-32558An issue was discovered in Sangoma Asterisk 13.x before 13.3…7.5
• CVE-2021-32559An integer overflow exists in pywin32 prior to version b301 …6.5
• CVE-2021-32560The Logging subsystem in OctoPrint before 1.6.0 has incorrec…6.5
• CVE-2021-32561OctoPrint before 1.6.0 allows XSS because API error messages…6.1
• CVE-2021-32563An issue was discovered in Thunar before 4.16.7 and 4.17.x b…9.8
• CVE-2021-32565Invalid values in the Content-Length header sent to Apache T…7.5
• CVE-2021-32566Improper Input Validation vulnerability in HTTP/2 of Apache …7.5
• CVE-2021-32567Improper Input Validation vulnerability in HTTP/2 of Apache …7.5