CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Descripción sugerida RESERVADO JFinal CMS 5.1.0 está afectado por: Inyección SQL. Estas interfaces no usan el mismo componente, ni tienen filtros, sino que cada una utiliza su propio método de concatenación SQL, lo que resulta en inyección SQL. Información...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Descripción sugerida JFinal CMS 5.1.0 es vulnerable a la inyección SQL. Tipo de vulnerabilidad Inyección SQL Vendedor del producto el grupo de desarrollo Base de código del producto afectado https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Componente...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Descripción sugerida JFinal CMS 5.1.0 está afectado por: Inyección SQL. Estas interfaces no usan el mismo componente, ni tienen filtros, sino que cada una utiliza su propio método de concatenación SQL, lo que resulta en inyección SQL Información adicional...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Additional Information https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Vulnerability Type SQL Injection Vendor of Product the development group Affected Product Code Base https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0...

CVE-2022-37208

37208 CVE-2022-37208 Descripción sugerida JFinal CMS 5.1.0 es vulnerable a inyección SQL. Estas interfaces no utilizan el mismo componente, ni tienen filtros, sino que cada una usa su propio método de concatenación SQL, lo que provoca inyección SQL. Información adicional...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Primero que todo, debes instalar sqlmap. Necesitas configurar: dominio o IP objetivo tu cookie Luego ejecuta el shell: root@kitploit: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2022-37203

CVE-2022-37203 CVE-2022-37203 POC Información Adicional https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql3.md Tipo de Vulnerabilidad Inyección SQL Vendedor del Producto el grupo de desarrollo Código Base del Producto Afectado https://github.com/jflyfox/jfinalcms -...

CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Descripción sugerida JFinal CMS 5.1.0 es vulnerable a inyección SQL. Estas interfaces no usan el mismo componente, ni tienen filtros, sino que cada una utiliza su propio método de concatenación SQL, lo que resulta en inyección SQL. Información adicional...

CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Descripción sugerida JFinal CMS 5.1.0 está afectado por: Inyección SQL. Estas interfaces no utilizan el mismo componente, ni tienen filtros, sino que cada una utiliza su propio método de concatenación SQL, resultando en inyección SQL. Información adicional...

CVE-2022-37204

CVE-2022-37204 PoC de CVE-2022-37204 Descripción sugerida RESERVED JFinal CMS 5.1.0 es vulnerable a Inyección SQL. Información adicional https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Tipo de vulnerabilidad Inyección SQL Vendedor del producto el grupo de...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

The CVE concerns jflyfox jfinal_cms (versions up to 5.1.0). The vulnerability is in AdvicefeedbackController.java list functionality, where improper handling of the orderBy argument enables SQL injection. This can be exploited remotely. The issue was reported early via an issue and no public resp...

EUVD-2026-35004

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

PT-2026-47205

A vulnerability was identified in jflyfox jfinal cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through ...

jflyfox jfinal_cms 注入漏洞

jfinalcms is a content management system used for managing website sections, articles, and feedback content. jflyfox jfinalcms has a SQL injection vulnerability. The vulnerability arises due to the list function in the AdvicefeedbackController.java file not properly filtering the orderBy paramete...