633 matches found
JFinalCMS security vulnerabilities
JFinalCMS is a content management system. JFinalCMS 20221020 and previous versions of cross-site scripting vulnerability, the vulnerability stems from the file /admin/content parameter Title of the user-supplied data lack of effective filtering and escaping, an attacker can use this vulnerability...
Cross Site Scripting (XSS)
Jfinalcms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input validation in the friendship link component, allowing a remote attacker to execute arbitrary code through a crafted script...
CVE-2023-51254
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...
CVE-2023-51254
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...
CVE-2023-51254: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...
PT-2024-14079 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component. This enables the attacker to perform unauthorized actions on the...
Jfinalcms security vulnerability
JFinalCMS is a content management system by heyewei individual developer. A security vulnerability exists in Jfinalcms version v.5.0.0, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via a crafted script...
CVE-2023-51254
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...
CVE-2023-51254
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...
JFinalCMS SQL Injection Vulnerability (CNVD-2024-15735)
JFinalCMS is a content management system. JFinalCMS version 5.0.0 suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the file /admin/divdata/delete. An attacker can exploit this vulnerability to execute illegal SQL comman...
CVE-2024-2568
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...
CVE-2024-2568
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...
CVE-2024-2568 heyewei JFinalCMS Custom Data Page sql injection
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...
CVE-2024-2568
CVE-2024-2568 affects heyewei JFinalCMS 5.0.0, specifically the Custom Data Page’s file /admin/div_data/delete?divId=9. The issue is a SQL injection caused by lack of validation of externally supplied SQL, allowing remote exploitation. Multiple connected reports confirm the vulnerability and publ...
JFinalCMS SQL Injection Vulnerability
JFinalCMS is a content management system. JFinalCMS version 5.0.0 suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the file /admin/divdata/delete. An attacker can exploit this vulnerability to execute illegal SQL comman...
CVE-2024-2568: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...
PT-2024-21088 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: heyewei JFinalCMS version 5.0.0 Description: A critical issue has been found in the Custom Data Page component, specifically affecting an unknown functionality of the file "/admin/div data/delete?divId=9". This issue leads to sql injection an...
CVE-2024-24375
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...
