CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

Sql injection

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

CVE-2022-27341 affects JFinalCMS v2.0 and is a SQL injection vulnerability exploitable via the Article Management function. The base CVSS v2 score is 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and partial impact to confidentiality, integrity, and availability...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

JFinal SQL注入漏洞

JFinal is a Java-based open source framework for WEB + ORM . JFinal CMS v2.0 version of the SQL injection vulnerability , the vulnerability stems from the lack of article management function for SQL data filtering and escaping...

CVE-2022-27341: Improper Neutralization of Special Elements used in an SQL Command

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

PT-2022-18384

Name of the Vulnerable Software and Affected Versions JFinalCMS version 2.0 Description The issue is related to a SQL injection vulnerability in the Article Management function. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized access or...

Industrial Control System Malware Discovered

The Department of Energy, CISA, the FBI, and the NSA jointly issued an advisory describing a sophisticated piece of malware called Pipedream thats designed to attack a wide range of industrial control systems. This is clearly from a government, but no attribution is given. Theres also no indicati...

2022-04 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5012599)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

2022-04 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5012653)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

CVE-2021-43701

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articledb, via the fieldS and orderby parameters...

CVE-2021-43701

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articledb, via the fieldS and orderby parameters...

CVE-2022-1078

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/viewarticle/. The manipulation of the argument id with the input ' and select fromselectsleep10Avx and 'abc' = 'abc with an unknow...

SourceCodester College Website Management System SQL注入漏洞

SourceCodester College Website Management System is an application of SourceCodester, Inc. SourceCodester College Website Management System version 1.0 is vulnerable to SQL injection, which originates from the lack of user-supplied data and output data in the id parameter of...

PT-2022-11887

Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.9 Description The issue is related to a Time and Boolean-based Blind SQL Injection. This occurs in the /admin/export/getcsv/article db endpoint, specifically through the fieldS and orderby parameters. Recommendations For CS...

PT-2022-13640

Name of the Vulnerable Software and Affected Versions SourceCodester College Website Management System version 1.0 Description A critical issue has been identified, allowing for SQL injection. The affected endpoint is the file "/cwms/admin/?page=articles/view article/". The manipulation of the id...

CVE-2022-22719

A flaw was found in the modlua module of httpd. A crafted request body can cause a read to a random memory area due to an uninitialized value in functions called by the parsebody function. The highest threat from this vulnerability is to system availability. Mitigation Disabling modlua and...

Luocms SQL Injection Vulnerability (CNVD-2022-20131)

Luocms is an article management system. A SQL injection vulnerability exists in Luocms v2.0, which stems from a lack of validation of external input SQL statements in /admin/news/sortmod.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...