| Titolo | Langfang Extreme Network Technology Co., Ltd jizhicms <=2.5.5 SQL Injection |
|---|
| Descrizione | In the backend of the jizhicms framework, there is a SQL injection vulnerability in the interaction management comment list batch deletion of comments, which exists in versions<=2.5.5 |
|---|
| Fonte | ⚠️ https://github.com/24-2021/vul2/blob/main/jizhicms%3DV2.5.5-deleteAll.html-data%20parameter-SQL%20injection/jizhicms%3DV2.5.5-deleteAll.html-data%20parameter-SQL%20injection.md |
|---|
| Utente | nobb (UID 77370) |
|---|
| Sottomissione | 13/11/2025 09:17 (9 mesi fa) |
|---|
| Moderazione | 04/12/2025 12:27 (21 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 334253 [JIZHICMS fino a 2.5.5 Batch Delete Comments deleteAll.html deleteAll/findAll/delete iniezione SQL] |
|---|
| Punti | 16 |
|---|