Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list...

CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/comment/list endpoint. The issue is a result of unsafe handling in the comment list API, enabling potentially malicious input to alter queries. The Red Hat, ENISA EUVD, OSV, NVD and CVE records all reflect this same description. The P...

CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...

CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list...

CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...

CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via the endpoint /admin/article/list_approve . The connected documents confirm this vulnerability but do not provide explicit exploit details or a fixed version. Remediation recommended: upgrade to a newer JFinal CMS version that contains a fix; no ...

CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...

CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...

CVE-2022-38272

CVE-2022-38272 affects JFinal CMS 5.1.0, with SQL Injection via the /admin/article/list endpoint. The connected sources confirm the vulnerability but do not provide explicit root-cause details in the documents; exploitation status is not described. PT-Security notes recommend updating JFinal CMS ...

CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...

CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...

CVE-2022-38275

JFinal CMS 5.1.0 is affected by an SQL Injection vulnerability exposed via the /admin/contact/list API endpoint. The issue stems from unsafely handled input in the API that leads to SQL injection, with a CVSS v3.1 base score of 7.2 (HIGH) in the NVD record. The PT-SECURITY advisory confirms the v...

CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...

CVE-2022-38277

CVE-2022-38277 affects JFinal CMS 5.1.0 . The flaw is a SQL Injection at the endpoint /admin/folderrollpicture/list caused by unsafe SQL handling. According to NVD, the impact is High (C/H/I/A) with a CVSS v3.1 base score 7.2 (Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The attack vector is net...