PT-2023-30467 · Jflyfox · Jfinalcms

Name of the Vulnerable Software and Affected Versions: jflyfox jfinalCMS version 5.1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "login.jsp" component in the template management module. Recommendations: For jflyfox jfinalCMS version 5.1....

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

Arbitrary file deletion

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-34645

CVE-2023-34645 affects jfinal CMS 5.1.0 with an arbitrary file read vulnerability. The initial documents report a HIGH severity (CVSS 7.5, NETWORK/LOW CW, no user interaction) and specify affected software, but do not provide the root cause details or a remediation in the supplied content. Multip...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

GHSA-GH24-C683-79R2 Duplicate Advisory: Arbitrary code execution in jfinal CMS

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8qhm-ch8h-xgjr. This link is maintained to preserve external references. Original Description Command execution vulnerability in the ActionEnter Class ins jfinal CMS version 5.1.0 allows attackers to execute...

PT-2023-20805 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: jfinal CMS version 5.1.0 Description: A command execution issue in the ActionEnter Class of jfinal CMS allows attackers to execute arbitrary code via a created json file to the ueditor route. Recommendations: For jfinal CMS version 5.1.0,...

Remote code execution in JFinal CMS

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

GHSA-8QHM-CH8H-XGJR Remote code execution in JFinal CMS

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

Remote code execution

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-30349

CVE-2023-30349 affects JFinal CMS v5.1.0; confirmed remote code execution via the ActionEnter function. The vulnerability is described as a high-severity (CVSS v3.1: 9.8) network‑based issue with no authentication required and no user interaction. The provided documents do not specify a fixed ver...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

PT-2023-22645 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the ActionEnter function. Recommendations: For JFinal CMS version 5.1.0, at the moment, there is no information about...

CVE-2023-24747

Jfinal CMS v5.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/dict/list...