568 matches found
CVE-2022-38276
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
CVE-2022-38275
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
CVE-2022-38274
JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/comment/list endpoint. The issue is a result of unsafe handling in the comment list API, enabling potentially malicious input to alter queries. The Red Hat, ENISA EUVD, OSV, NVD and CVE records all reflect this same description. The P...
