CVE-2021-40639

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js...

PT-2021-22937

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0 Description The issue is related to improper access control, allowing attackers to access sensitive information. This can be done via the "/classes/conf/db.properties" and "config=filemanager.config.js" parameters...

CVE-2021-40639: Exposure of Resource to Wrong Sphere

Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js...