PT-2022-23868

Name of the Vulnerable Software and Affected Versions JFinal CMS version 5.1.0 Description The issue is related to SQL Injection, which can be exploited via the "/jfinal cms/system/user/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations For JFinal...