CVE-2025-50229

Mô tả

Tham khảo

• jizhicms.cn · Product
• gist.github.com/4iFei/14ad89c3b44348dd575bf5ae0ed5a19c · Third Party Advisory
• Cherry-toto/jizhicms · Product
• Cherry-toto/jizhicms · Exploit

Lỗ hổng khác của jizhicms

• CVE-2025-50228NGHIÊM TRỌNG 9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.
• CVE-2026-29840TRUNG BÌNH 5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserControll…
• CVE-2026-3292CAO 8.8A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of t…
• CVE-2025-70397CAO 7.2jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.
• CVE-2020-37117CAO 8.8jizhiCMS 1.6.7 contains a file download vulnerability in the admin plugins update endpoint that allows authenticated administrators to downl…