632 matches found
JFinalCMS Security Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 5.0.0 that allows remote attackers to traverse directories and read files via the /common/down/file fileKey parameter...
CVE-2023-50449
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
CVE-2023-50449
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
GHSA-M42V-QV3C-H6J7 Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
GHSA-HJFP-2J7Q-XMX4 Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...
Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
GHSA-F2W8-4M48-5QRQ Cross-site Scripting in JFinalCMS
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...
CVE-2023-49487
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
CVE-2023-49486
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
CVE-2023-49485
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...
CVE-2023-49487
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
Cross site scripting
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...
Cross site scripting
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
Cross site scripting
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
JFinalCMS 安全漏洞
JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the section management department, an attacker can exploit this vulnerability by injecti...
CVE-2023-49487
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
CVE-2023-49486
JFinalCMS v5.0.0 is affected by a cross-site scripting (XSS) vulnerability in the model management department. The root cause is lack of effective filtering and escaping of user-supplied data. The vulnerability could allow attackers to execute arbitrary web scripts or HTML by injecting a crafted ...