SQL injection in jflyfox jfinal

2022-05-2700:00:48

Google

osv.dev

0.002 Low

EPSS

Percentile

54.6%

JSON

Jfinal cms 5.1.0 is vulnerable to SQL Injection.

CPENameOperatorVersion
com.jflyfox:jflyfox_jfinaleq4.4
com.jflyfox:jflyfox_jfinaleq3.0
com.jflyfox:jflyfox_jfinaleq4.2
com.jflyfox:jflyfox_jfinaleq4.0
com.jflyfox:jflyfox_jfinaleq2.1
com.jflyfox:jflyfox_jfinaleq4.1
com.jflyfox:jflyfox_jfinaleq4.3
com.jflyfox:jflyfox_jfinaleq1.9
com.jflyfox:jflyfox_jfinaleq2.0
com.jflyfox:jflyfox_jfinaleq4.5.0

Name	Operator	Version
com.jflyfox:jflyfox_jfinal	eq	4.4
com.jflyfox:jflyfox_jfinal	eq	3.0
com.jflyfox:jflyfox_jfinal	eq	4.2
com.jflyfox:jflyfox_jfinal	eq	4.0
com.jflyfox:jflyfox_jfinal	eq	2.1
com.jflyfox:jflyfox_jfinal	eq	4.1
com.jflyfox:jflyfox_jfinal	eq	4.3
com.jflyfox:jflyfox_jfinal	eq	1.9
com.jflyfox:jflyfox_jfinal	eq	2.0
com.jflyfox:jflyfox_jfinal	eq	4.5.0