Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

JiZhiCMS — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in JiZhiCMS, with AI-generated Chinese analysis, references, and POCs.

Vendor: n/a

CVE IDTitleCVSSSeverityPublished
CVE-2026-6978 JiZhiCMS addcache.html htmlspecialchars_decode sql injection CWE-89 4.7 Medium2026-04-25
CVE-2026-3292 jizhiCMS Batch Model.php findAll sql injection CWE-89 6.3 Medium2026-02-27
CVE-2020-37117 jizhiCMS 1.6.7 - Arbitrary File Download CWE-434 8.8 High2026-02-05
CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting CWE-79 2.4 Low2025-12-04
CVE-2025-14012 JIZHICMS Batch Delete Comments deleteAll.html delete sql injection CWE-89 4.7 Medium2025-12-04
CVE-2025-14011 JIZHICMS Add Display Name Field addcomment.html commentlist sql injection CWE-89 4.7 Medium2025-12-04
CVE-2025-2639 JIZHICMS Article release.html improper authorization CWE-285 4.3 Medium2025-03-23
CVE-2025-2638 JIZHICMS Article release.html improper authorization CWE-285 4.3 Medium2025-03-23
CVE-2025-2637 JIZHICMS Account Profile Page userinfo.html improper authorization CWE-285 4.3 Medium2025-03-23
CVE-2023-2927 JIZHICMS TemplateController.php index server-side request forgery CWE-918 6.3 Medium2023-05-27

All 10 known CVE vulnerabilities affecting JiZhiCMS with full Chinese analysis, references, and POCs where available.