JIZHICMS SQL注入漏洞

JIZHICMS is an open-source content management system developed by JIZHI Corporation in China. Versions of jizhiCMS 2.5.6 and earlier had a SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter ‘data’ in the function ‘findAll’ of the ‘Model.php’ library i...