450 matches found
CVE-2022-38277
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
CVE-2022-38277
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
CVE-2022-38276
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
CVE-2022-38278
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
CVE-2022-38278
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
CVE-2022-38278
Affected software & impact: JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/friendlylink/list endpoint. The vulnerability is documented across multiple sources, confirming the issue originates from that API path and involves improper handling of input that leads to SQL injection. R...
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
CVE-2022-38281
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. The root cause is improper handling of user input in SQL queries within the affected endpoint. The CVSS v3.1 base metrics indicate a High impact on confidentiality, integrity, and availability (7.2, HIGH) with network access r...
CVE-2022-38281
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
CVE-2022-38281
CVE-2022-38281 affects JFinal CMS 5.1.0; the vulnerability is a SQL injection in the /admin/site/list endpoint. Root cause: unsafely built SQL queries using user input. Impact as stated: potential data disclosure or modification with high severity (per CVSS 3.1). Remediation guidance from PT-2022...
CVE-2022-38282
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
CVE-2022-38282
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
CVE-2022-38282
CVE-2022-38282 affects JFinal CMS 5.1.0 with a SQL Injection in the /admin/videoalbum/list endpoint. Root cause: unsanitized input in that API path leads to injection. Impact per sources is consistent with high severity; no exploitation details are provided in the documents. Remediation: update t...
CVE-2022-38284
CVE-2022-38284 affects JFinal CMS 5.1.0. The vulnerability is a SQL Injection exposed via the /system/department/list API endpoint, with a CVSS v3.1 base score of 7.2 (HIGH) and no user interaction required. A remediation path exists: upgrade to a newer JFinal CMS version that contains a fix (as ...