440 matches found
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
CVE-2022-38274
JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/comment/list endpoint. The issue is a result of unsafe handling in the comment list API, enabling potentially malicious input to alter queries. The Red Hat, ENISA EUVD, OSV, NVD and CVE records all reflect this same description. The P...
CVE-2022-38274
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...
CVE-2022-38274
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...