Cross site scripting

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

CVE-2023-22975: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

PT-2023-18808 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under "/front/person/profile.html". Recommendations: For...

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

CVE-2022-37202: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

PT-2022-23871

Name of the Vulnerable Software and Affected Versions JFinal CMS version 5.1.0 Description The issue allows for SQL Injection via the "/admin/advicefeedback/list" API endpoint. Recommendations For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the momen...

CVE-2022-37202

CVE-2022-37202 affects JFinal CMS 5.1.0, where multiple interfaces (e.g., /admin/advicefeedback/list) expose SQL Injection due to unsafe SQL concatenation in distinct components. The CVSS 3.1 vector indicates NETWORK attack vector, LOW attack complexity, LOW privileges required, and high impact t...

CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

jfinal cms SQL注入漏洞

jfinal cms is a java development of powerful information consulting website , using the simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework. A SQL injection vulnerability exists in jfinal cms version 5.1.0, which stems...

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37208

Technical details about CVE-2022-37208 are not publicly available in the provided connected documents. The description notes SQL injection in JFinal CMS 5.1.0, but there are no concrete technical specifics, exploits, fixes, or affected components in the supplied sources. Monitor for updates.

PT-2022-23876 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. The affected interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...