← All advisories

High severity7.2NVD Advisory· Published Feb 17, 2026· Updated Jul 5, 2026

CVE-2025-70397

CVE-2025-70397

Description

jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.

Affected products

3

Jizhicms/Jizhicms3 versions
cpe:2.3:a:jizhicms:jizhicms:2.5.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jizhicms:jizhicms:2.5.6:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =2.5.6

Patches

Vulnerability mechanics

References

1

www.23882.me/index.php/2026/02/15/jizhicms-%e5%90%8e%e5%8f%b0%e5%ad%98%e5%9c%a8sql%e6%b3%a8%e5%85%a5/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.