Description Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module. References https://github.com/Cherry-toto/jizhicms http://jizhicms.cn https://github.com/Cherry-toto/jizhicms/issues/105 https://gist.github.com/4iFei/14ad89c3b44348dd575bf5ae0ed5a19c