8 matches found
CVE-2026-2200
A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the publi...
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37204
CVE-2022-37204 affects Final CMS 5.1.0 and is a SQL Injection vulnerability. The vulnerability stems from interfaces that concatenate SQL without proper safeguards, enabling remote exploitation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8). A PoC/exploit exists ...
PT-2022-23873
Name of the Vulnerable Software and Affected Versions Final CMS version 5.1.0 Description The issue is related to SQL Injection. Recommendations For Final CMS version 5.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
