Lucene search
+L

96 matches found

CNVD
CNVD
added 2022/06/27 12:00 a.m.21 views

Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-58383)

Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS v5.1.0 version of the cross-site scripting vulnerability , the...

5.4CVSS5.2AI score0.00497EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/06/27 12:00 a.m.67 views

Jfinal CMS SQL Injection Vulnerability (CNVD-2022-58382)

Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS version v5.1.0 has a SQL injection vulnerability that originates from...

7.2CVSS7.2AI score0.00953EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/31 12:00 a.m.231 views

Jfinal CMS SQL Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...

9.8CVSS3AI score0.01064EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/09 12:00 a.m.56 views

Jfinal CMS Command Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...

7.5CVSS4.5AI score0.02035EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/04/13 12:00 a.m.37 views

Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-81357)

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...

3.5CVSS1.9AI score0.00479EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.46 views

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java that uses JFinal as the web framework, beetl for the template engine, mysql for the database, and bootstrap framework for the front end. an improper access control vulnerability exists in Jfinal CMS 4.7.1 and earlier...

4CVSS2AI score0.01601EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.49 views

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the JFinal web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS 4.7.1 and earlier versions exist improper access control vulnerabilities. An attacker can use the...

6.5CVSS2.8AI score0.07522EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.26 views

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using JFinal as the web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS 4.7.1 and earlier versions have improper access control vulnerabilities. An attacker could use t...

4CVSS3AI score0.03876EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.25 views

Jfinal cmsS cross-site scripting vulnerability

Jfinal CMS is a powerful information consulting website developed in java that uses JFinal as the web framework, beetl for the template engine, mysql for the database, and bootstrap framework for the front end. cross-site scripting vulnerability exists in Jfinal CMS 4.7.1 and earlier versions. An...

3.5CVSS3.5AI score0.01083EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.67 views

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java that uses JFinal as the web framework, beetl for the template engine, mysql for the database, and bootstrap framework for the front-end. improper access control vulnerabilities exist in Jfinal CMS 4.7.1 and earlier versions...

5.5CVSS2.2AI score0.0349EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/09/16 12:00 a.m.22 views

Jfinal cms command injection vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using JFinal as the web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS 4.7.1 and earlier versions exist command injection vulnerability. An attacker can upload a...

6.5CVSS2.3AI score0.05031EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2021/07/09 12:00 a.m.7 views

Jfinal cms suffers from SQL Injection Vulnerability

jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal cms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/07/07 12:00 a.m.7 views

SQL Injection Vulnerability in CicadasCMS

CicadasCMS is a CMS developed with springboot+mybatis+beetl. CicadasCMS suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/06/02 12:00 a.m.13 views

XSS Vulnerability at jfinal cms publishing blog posts

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms publish blog posts at the existence of XSS vulnerabilities , attackers...

6.2AI score
SaveExploits0
CNVD
CNVD
added 2020/06/02 12:00 a.m.5 views

XSS Vulnerability in jfinal cms User Profile Edit

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms user profile editing XSS vulnerability , an attacker can exploit the...

6.1AI score
SaveExploits0
CNVD
CNVD
added 2019/03/29 12:00 a.m.11 views

Jfinal cms backend has arbitrary file read vulnerability

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms backend exists arbitrary file read vulnerability. Attackers can use the vulnerability to read the database configuration file...

7AI score
SaveExploits0
Rows per page
Query Builder