Arbitrary Code Execution

jfinal is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a lack of validation in the template function, which allows an attacker to execute malicious code into the system...