CVE-2026-116274

A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper authorization. The attack can be launched remotely. The exploit ha...

CVE-2026-116274

A vulnerability exists in JIZHICMS up to version 2.5.6 within the Front-end Order Handler component. Specifically, the Pay function in the file app/home/c/OrderController.php is susceptible to improper authorization due to the manipulation of the orderno argument. This flaw allows for remote atta...

EUVD-2026-109787

A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper authorization. The attack can be launched remotely. The exploit ha...