EUVD-2022-39860

Malicious code in bioql PyPI...

EUVD-2022-6013

Malicious code in bioql PyPI...

EUVD-2022-4052

Malicious code in bioql PyPI...

EUVD-2022-39854

Malicious code in bioql PyPI...

EUVD-2022-40869

Malicious code in bioql PyPI...

EUVD-2022-6467

Malicious code in bioql PyPI...

EUVD-2022-40876

Malicious code in bioql PyPI...

EUVD-2022-39853

Malicious code in bioql PyPI...

EUVD-2022-40871

Malicious code in bioql PyPI...

EUVD-2022-6641

Malicious code in bioql PyPI...

EUVD-2022-40868

Malicious code in bioql PyPI...

EUVD-2022-40875

Malicious code in bioql PyPI...

EUVD-2022-32947

Malicious code in bioql PyPI...

CVE-2025-6105 jflyfox jfinal_cms HOME.java cross-site request forgery

A vulnerability has been found in jflyfox jfinalcms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed...

PT-2025-25516

Name of the Vulnerable Software and Affected Versions jflyfox jfinal cms version 5.0.1 Description A cross-site request forgery issue has been identified, affecting the HOME.java file. The manipulation of the Logout argument can lead to this issue. The attack can be initiated remotely...

jflyfox jfinal_cms security vulnerabilities

jflyfox jfinalcms is jflyfox open source a jfinal cms is a java development of a powerful information consulting website , using a simple and powerful JFinal as a web framework , the template engine with beetl, the database with mysql, front-end bootstrap framework . Support oauth2 authentication...

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...