Lucene search
+L

594 matches found

Prion
Prion
added 2022/10/13 12:15 p.m.22 views

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

6.5CVSS9AI score0.01185EPSS
SaveExploits2References2Affected Software1
CNNVD
CNNVD
added 2022/10/13 12:0 a.m.9 views

jfinal cms SQL注入漏洞

jfinal cms is a java development of powerful information consulting website , using the simple and powerful JFinal as the web framework , template engine with beetl , database with mysql , front-end bootstrap framework. A SQL injection vulnerability exists in jfinal cms version 5.1.0, which stems...

8.8CVSS8AI score0.01185EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.8 views

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

9.1AI score0.01185EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2022/10/13 12:0 a.m.13 views

PT-2022-23876 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. The affected interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.8CVSS8.5AI score0.01185EPSS
SaveExploits2References6
OSV
OSV
added 2022/10/13 12:0 a.m.20 views

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.8CVSS7.7AI score
SaveExploits0References4
CVE
CVE
added 2022/10/13 12:0 a.m.68 views

CVE-2022-37208

Technical details about CVE-2022-37208 are not publicly available in the provided connected documents. The description notes SQL injection in JFinal CMS 5.1.0, but there are no concrete technical specifics, exploits, fixes, or affected components in the supplied sources. Monitor for updates.

8.8CVSS9AI score0.01185EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/10/13 12:0 a.m.28 views

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

9.3AI score0.01185EPSS
SaveExploits2References2
CNVD
CNVD
added 2022/09/29 12:0 a.m.28 views

Jfinal SQL Injection Vulnerability (CNVD-2022-67142)

JFinal is a Java-based language WEB ORM open source framework. JFinal CMS version 5.1.0 SQL injection vulnerability , the vulnerability stems from its several interfaces do not use the same components , and did not apply filters , and each interface uses its own SQL connection method , an attacke...

8.8CVSS9AI score0.01222EPSS
SaveExploits3References1
NVD
NVD
added 2022/09/27 11:15 p.m.18 views

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.8CVSS0.01222EPSS
SaveExploits3References2
Prion
Prion
added 2022/09/27 11:15 p.m.15 views

Sql injection

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

6.5CVSS9.1AI score0.01222EPSS
SaveExploits3References2Affected Software1
CVE
CVE
added 2022/09/27 1:12 p.m.62 views

CVE-2022-37209

CVE-2022-37209 affects JFinal CMS 5.1.0. The vulnerability is a SQL Injection caused by multiple interfaces not using the same component and lacking filters, with each interface using its own SQL concatenation method, enabling injection. CVSSv3.1 scores indicate high risk (8.8) with network attac...

8.8CVSS9.1AI score0.01222EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2022/09/27 1:12 p.m.27 views

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

9.4AI score0.01222EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2022/09/27 1:12 p.m.7 views

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

9.2AI score0.01222EPSS
SaveExploits3References2
OSV
OSV
added 2022/09/27 1:12 p.m.16 views

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.8CVSS7.9AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/09/27 12:0 a.m.6 views

JFinal SQL注入漏洞

JFinal is a Java-based language WEB ORM open source framework. JFinal CMS version 5.1.0 SQL injection vulnerability , the vulnerability stems from its several interfaces do not use the same components , and did not apply filters , and each interface uses its own SQL connection method , an attacke...

8.8CVSS7.9AI score0.01222EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2022/09/27 12:0 a.m.4 views

PT-2022-23877 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL injection. It is mentioned that the affected interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQ...

8.8CVSS8.8AI score0.01222EPSS
SaveExploits3References5
NVD
NVD
added 2022/09/20 6:15 p.m.19 views

CVE-2022-37205

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.8CVSS0.01223EPSS
SaveExploits2References2
Prion
Prion
added 2022/09/20 6:15 p.m.13 views

Sql injection

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

6.5CVSS9.1AI score0.01223EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/20 5:40 p.m.5 views

CVE-2022-37205

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

8.2AI score0.01223EPSS
SaveExploits2References2
CVE
CVE
added 2022/09/20 5:40 p.m.64 views

CVE-2022-37205

CVE-2022-37205 affects JFinal CMS 5.1.0. SQL Injection stems from multiple interfaces using their own SQL concatenation without filters, enabling high-impact access (C/H, I/H, A/H) per CVSS 3.1. Exploitation PoC exists on GitHub (AgainstTheLight) and a related exploit repo is linked in the connec...

8.8CVSS9.1AI score0.01223EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder