552 matches found
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. The root cause is improper handling of user input in SQL queries within the affected endpoint. The CVSS v3.1 base metrics indicate a High impact on confidentiality, integrity, and availability (7.2, HIGH) with network access r...
CVE-2022-38281
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
CVE-2022-38281
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
CVE-2022-38282
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
CVE-2022-38282
CVE-2022-38282 affects JFinal CMS 5.1.0 with a SQL Injection in the /admin/videoalbum/list endpoint. Root cause: unsanitized input in that API path leads to injection. Impact per sources is consistent with high severity; no exploitation details are provided in the documents. Remediation: update t...
CVE-2022-38282
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
CVE-2022-38282
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
CVE-2022-38283
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...
CVE-2022-38283
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...
CVE-2022-38284
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...
CVE-2022-38284
CVE-2022-38284 affects JFinal CMS 5.1.0. The vulnerability is a SQL Injection exposed via the /system/department/list API endpoint, with a CVSS v3.1 base score of 7.2 (HIGH) and no user interaction required. A remediation path exists: upgrade to a newer JFinal CMS version that contains a fix (as ...
CVE-2022-38283
CVE-2022-38283 affects JFinal CMS 5.1.0, where the /admin/video/list endpoint is vulnerable to SQL injection due to improper input handling. The vulnerability is documented with a CVSS v3.1 base score of 7.2 (HIGH), impacting confidentiality, integrity, and availability. Remediation guidance avai...
CVE-2022-38284
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...
CVE-2022-38284
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...
CVE-2022-38283
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...
CVE-2022-38285
CVE-2022-38285 concerns JFinal CMS 5.1.0, where the vulnerability is an SQL Injection in the /system/menu/list API endpoint. Root cause and impact are described across multiple sources as an injection flaw that can lead to high confidentiality, integrity, and availability impact. The NVD entry re...