Lucene search
+L

4 matches found

Prion
Prion
•added 2021/09/15 2:15 p.m.•22 views

Improper access control

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile' function in the component 'modules/filemanager/FileManagerController.java'...

4CVSS6.3AI score0.03876EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/09/15 1:52 p.m.•3 views

CVE-2020-19154

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile' function in the component 'modules/filemanager/FileManagerController.java'...

7.1CVSS0.03876EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/15 12:00 a.m.•7 views

CVE-2020-19154: Improper Limitation of a Pathname to a Restricted Directory

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile' function in the component 'modules/filemanager/FileManagerController.java'...

6.5CVSS5.8AI score0.03876EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/15 12:00 a.m.•4 views

PT-2021-10294

Name of the Vulnerable Software and Affected Versions: Jfinal CMS versions 4.7.1 and earlier Description: The issue allows remote attackers to obtain sensitive information due to improper access control. This is achieved via the FileManager.editFile function in the...

6.5CVSS0.03876EPSS
SaveExploits1References4
Rows per page
Query Builder