CVE-2025-70397: Improper Neutralization of Special Elements used in an SQL Command

jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter...

CVE-2025-70397

jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter...

CVE-2025-70397

The content management system jizhicms version 2.5.6 is vulnerable to SQL Injection due to a lack of validation for the data parameter in the Article/deleteAll and Extmolds/deleteAll functions. This vulnerability allows an attacker to execute arbitrary SQL commands. As a remediation, users should...

CVE-2025-70397

jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter...

PT-2026-20264

Name of the Vulnerable Software and Affected Versions jizhicms version 2.5.6 Description The software contains a SQL Injection issue in the 'Article/deleteAll' and 'Extmolds/deleteAll' functionalities. The issue is triggered through the data parameter. Recommendations Update to a newer version th...