568 matches found
CVE-2022-33113
CVE-2022-33113 affects Jfinal CMS v5.1.0. A cross-site scripting vulnerability allows an attacker to inject and trigger arbitrary JavaScript via a crafted payload in the keyword field of the Publish Blog module. The issue is documented across multiple feeds (including Red Hat, Veracode, CNVD and ...
CVE-2022-33113
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Jfinal CMS SQL注入漏洞
Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS version v5.1.0 has a SQL injection vulnerability that originates from...
Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-66500)
Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as the web framework, template engine with beetl, database with mysql, and front-end bootstrap framework. cross-site scripting vulnerability exists in Jfinal CMS v5.1.0. The vulnerabili...
GHSA-8RP2-J3VJ-HGJ4 Cross site scripting in Jfinal
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
Cross site scripting in Jfinal
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
CVE-2022-29648
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
CVE-2022-29648
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
Cross site scripting
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
Jfinal CMS 跨站脚本漏洞
Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as the web framework, template engine with beetl, database with mysql, and front-end bootstrap framework. cross-site scripting vulnerability exists in Jfinal CMS v5.1.0. The vulnerabili...
CVE-2022-29648
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
CVE-2022-29648
A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...
CVE-2022-29648
CVE-2022-29648 concerns Jfinal CMS v5.1.0 and describes a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML by crafting the X-Forwarded-For header. The available connected documents consistently state the issue as XSS in X-Forwarded-For hand...
Jfinal CMS SQL Injection Vulnerability
Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...
GHSA-595X-HH6C-HFV8 SQL injection in jflyfox jfinal
Jfinal cms 5.1.0 is vulnerable to SQL Injection...
CVE-2022-30500
Jfinal cms 5.1.0 is vulnerable to SQL Injection...
CVE-2022-30500
Jfinal cms 5.1.0 is vulnerable to SQL Injection...
Sql injection
Jfinal cms 5.1.0 is vulnerable to SQL Injection...
CVE-2022-30500
Jfinal CMS 5.1.0 is vulnerable to SQL Injection. The root cause is a vulnerability in the getOrderby function where path components under /admin/ are directly spliced into SQL, enabling attackers to inject SQL. Available descriptions confirm the issue but do not provide a remediation or exploitat...