Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/02/28 7:47 a.m.8 views

CVE-2026-3292

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

8.8CVSS6.3AI score0.00444EPSS
Exploits1References1
EUVD
EUVD
added 2026/02/27 6:31 a.m.6 views

EUVD-2026-9001

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

8.8CVSS6.3AI score0.00444EPSS
Exploits1References5
OSV
OSV
added 2026/02/27 5:18 a.m.3 views

CVE-2026-3292

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

8.8CVSS6.3AI score
Exploits0References4
NVD
NVD
added 2026/02/27 5:18 a.m.11 views

CVE-2026-3292

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

8.8CVSS0.00444EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/27 5:2 a.m.4 views

CVE-2026-3292

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

8.8CVSS6.3AI score0.00444EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/02/27 5:2 a.m.9 views

CVE-2026-3292 jizhiCMS Batch Model.php findAll sql injection

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

6.5CVSS6.3AI score0.00444EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/27 12:0 a.m.4 views

JIZHICMS SQL注入漏洞

JIZHICMS is an open-source content management system developed by JIZHI Corporation in China. Versions of jizhiCMS 2.5.6 and earlier had a SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter ‘data’ in the function ‘findAll’ of the ‘Model.php’ library i...

8.8CVSS6.7AI score0.00444EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/27 12:0 a.m.7 views

PT-2026-22299

A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit ha...

6.5CVSS6.3AI score0.00444EPSS
Exploits1References5
Rows per page
Query Builder