5 matches found
CVE-2025-70397
The content management system jizhicms version 2.5.6 is vulnerable to SQL Injection due to a lack of validation for the data parameter in the Article/deleteAll and Extmolds/deleteAll functions. This vulnerability allows an attacker to execute arbitrary SQL commands. As a remediation, users should...
CVE-2025-70397: Improper Neutralization of Special Elements used in an SQL Command
jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter...
PT-2026-20264
Name of the Vulnerable Software and Affected Versions jizhicms version 2.5.6 Description The software contains a SQL Injection issue in the 'Article/deleteAll' and 'Extmolds/deleteAll' functionalities. The issue is triggered through the data parameter. Recommendations Update to a newer version th...
