CVE-2025-3571

A vulnerability was found in Fannuo Enterprise Content Management System 凡诺企业网站管理系统 1.1/4.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/cms_chip.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://vuldb.com/?ctiid.304612
• https://vuldb.com/?id.304612
• https://vuldb.com/?submit.549927
• https://wiki.shikangsi.com/post/share/c46c50d3-c8d7-46a0-9fed-8d79a64abb44
• https://wiki.shikangsi.com/post/share/c46c50d3-c8d7-46a0-9fed-8d79a64abb44

Published

Apr 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-3565A vulnerability classified as critical was found in huanfenz…7.2
• CVE-2025-3566A vulnerability, which was classified as critical, has been …7.3
• CVE-2025-3567A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-3568A vulnerability has been found in Webkul Krayin CRM up to 2.…5.4
• CVE-2025-3569A vulnerability was found in JamesZBL/code-projects db-hospi…6.3
• CVE-2025-3570A vulnerability was found in JamesZBL/code-projects db-hospi…6.1
• CVE-2025-3572SmartRobot from INTUMIT has a Server-Side Request Forgery vu…7.5
• CVE-2025-3573Versions of the package jquery-validation before 1.20.0 are …6.1
• CVE-2025-3574Insecure Direct Object Reference vulnerability in Deporsite …8.7
• CVE-2025-3575Insecure Direct Object Reference vulnerability in Deporsite …8.7
• CVE-2025-3576A vulnerability in the MIT Kerberos implementation allows GS…5.9
• CVE-2025-3577**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability…4.9