Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-17 | 2 | Disclosure2 |
| 2026-02-22 | 1 | Disclosure1 |
CVE-2025-70397 jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter. https://www.cve.org/CVERecord?id=CVE-2025-70397
Post summary
The text announces that CVE-2025-70397 is a SQL Injection vulnerability affecting specific endpoints in jizhicms 2.5.6, without mentioning PoC, exploitation, or remediation.
CVE-2025-70397 (CVSS:7.2, HIGH) is Modified. jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter...https://nvd.nist.gov/vuln/detail/CVE-2025-70397 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces a SQL injection vulnerability in jizhicms 2.5.6 (CVE-2025-70397) with a CVSS score of 7.2, but provides no PoC, exploit, or patch details.
CVE-2025-70397 SQL Injection in jizhicms 2.5.6 via Article/deleteAll and Extmolds/deleteAll https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70397
Post summary
A SQL Injection vulnerability (CVE-2025-70397) affecting jizhicms 2.5.6's Article/deleteAll and Extmolds/deleteAll endpoints has been disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jizhicms | jizhicms | 2.5.6 | - | - |