CVE-2024-2568 heyewei JFinalCMS Custom Data Page sql injection

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

CVE-2024-2568 heyewei JFinalCMS Custom Data Page sql injection

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

CVE-2024-2568

CVE-2024-2568 affects heyewei JFinalCMS 5.0.0, specifically the Custom Data Page’s file /admin/div_data/delete?divId=9. The issue is a SQL injection caused by lack of validation of externally supplied SQL, allowing remote exploitation. Multiple connected reports confirm the vulnerability and publ...