CVE-2025-70397

Description

References

• 23882.me/index.php/2026/02/15/jizhicms-%e5%90%8e%e5%8f%b0%e5%ad%98%e5%9c%a8sql%e6%b3%a8%e5%85%a5 · Exploit

jizhicms의 다른 취약점

• CVE-2025-50229심각 9.8Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.
• CVE-2025-50228심각 9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.
• CVE-2026-29840보통 5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserControll…
• CVE-2026-3292높음 8.8A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of t…
• CVE-2020-37117높음 8.8jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated administrators to downl…