CVE-2025-70397: SQL Injection
Published Feb 17, 2026
·Updated
jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.
Affected Software
2 affected components
Jizhicms JIZHICMS
Jizhicms JIZHICMS=2.5.6
Event History
Feb 17, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:20 PM
DescriptionSeverityWeaknessAffected Software
Jun 1, 58107
Event
via NVD·08:29 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-70397?
CVE-2025-70397 is classified as a high severity vulnerability due to its potential for SQL Injection attacks.
2
How do I fix CVE-2025-70397?
To fix CVE-2025-70397, update to the latest version of Jizhicms that addresses the SQL Injection vulnerability.
3
What components of jizhicms are affected by CVE-2025-70397?
CVE-2025-70397 affects the Article/deleteAll and Extmolds/deleteAll components of jizhicms 2.5.6.
4
Can CVE-2025-70397 be exploited remotely?
Yes, CVE-2025-70397 can be exploited remotely if the affected jizhicms instance is accessible over the internet.
5
What type of attack does CVE-2025-70397 enable?
CVE-2025-70397 enables SQL Injection attacks, which can compromise the database and potentially lead to unauthorized access to sensitive data.