Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3292 A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface… https://www.cve.org/CVERecord?id=CVE-2026-3292
Post summary
A vulnerability in jizhiCMS up to version 2.5.6 affecting the findAll function in frphp/lib/Model.php has been identified, with no PoC, exploit, or patch information provided.
CVE-2026-3292 SQL Injection in jizhiCMS Batch Interface via Argument Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3292
Post summary
The post announces a SQL Injection vulnerability in jizhiCMS’s batch interface and links to a vulnerability detail page.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3292 - jizhiCMS Batch Model.php findAll sql injection Intel Report: https://ift.tt/UT3CLDS
Post summary
A new CVE-2026-3292 vulnerability in jizhiCMS’s Batch Model.php file allows SQL injection, as reported by CYBERDUDEBIVASH Sentinel Apex.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jizhicms | jizhicms | - | - | - |