Lucene search
+L

2104 matches found

CNVD
CNVD
•added 2022/06/09 12:00 a.m.•40 views

Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-66500)

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as the web framework, template engine with beetl, database with mysql, and front-end bootstrap framework. cross-site scripting vulnerability exists in Jfinal CMS v5.1.0. The vulnerabili...

3.5CVSS2AI score0.00513EPSS
SaveExploits1Affected Software1
osv_ghsa
osv_ghsa
•added 2022/06/03 12:01 a.m.•34 views

GHSA-8RP2-J3VJ-HGJ4 Cross site scripting in Jfinal

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS5.2AI score0.00513EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/06/03 12:01 a.m.•41 views

Cross site scripting in Jfinal

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS5.1AI score0.00513EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/06/02 2:15 p.m.•27 views

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS0.00513EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•13 views

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS6AI score0.00513EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/02 2:15 p.m.•31 views

Cross site scripting

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

3.5CVSS5.3AI score0.00513EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•17 views

Jfinal CMS Cross-Site Scripting Vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as the web framework, template engine with beetl, database with mysql, and front-end bootstrap framework. cross-site scripting vulnerability exists in Jfinal CMS v5.1.0. The vulnerabili...

5.4CVSS5.5AI score0.00513EPSS
SaveExploits1References2
Mend
Mend
•added 2022/05/31 9:30 p.m.•7 views

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS0.00513EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/05/31 9:30 p.m.•36 views

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4AI score0.00513EPSS
SaveExploits1References1
CVE
CVE
•added 2022/05/31 9:30 p.m.•98 views

CVE-2022-29648

CVE-2022-29648 concerns Jfinal CMS v5.1.0 and describes a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML by crafting the X-Forwarded-For header. The available connected documents consistently state the issue as XSS in X-Forwarded-For hand...

5.4CVSS5.2AI score0.00513EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2022/05/31 9:30 p.m.•27 views

CVE-2022-29648

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.3AI score
SaveExploits0References3
CNVD
CNVD
•added 2022/05/31 12:00 a.m.•243 views

Jfinal CMS SQL Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...

9.8CVSS3AI score0.0108EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/31 12:00 a.m.•7 views

CVE-2022-29648: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request...

5.4CVSS6.2AI score0.00513EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/31 12:00 a.m.•4 views

PT-2022-19752

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. This enables attackers to potentially inject malicious code into websites,...

5.4CVSS0.00513EPSS
SaveExploits1References7
osv_ghsa
osv_ghsa
•added 2022/05/27 12:00 a.m.•34 views

GHSA-595X-HH6C-HFV8 SQL injection in jflyfox jfinal

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.8CVSS9.6AI score0.0108EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/05/26 4:15 p.m.•8 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.8CVSS7.4AI score0.0108EPSS
SaveExploits1References2
NVD
NVD
•added 2022/05/26 4:15 p.m.•35 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.8CVSS0.0108EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/26 4:15 p.m.•29 views

Sql injection

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

7.5CVSS9.6AI score0.0108EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/26 3:56 p.m.•45 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.9AI score0.0108EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/05/26 3:56 p.m.•27 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.7AI score
SaveExploits0References3
Rows per page
Query Builder