CVE-2026-3292

CVE-2026-3292 affects jizhiCMS up to version 2.5.6. The vulnerability is in the Batch Interface component, specifically the findAll function in frphp/lib/Model.php, where input data manipulation leads to SQL injection. It is exploitable remotely and a public exploit has been disclosed. The vendor...

CVE-2026-3292 jizhiCMS Batch Model.php findAll sql injection

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...