CVE-2026-2200

A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the publi...

CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL Injection...

CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL Injection...

CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL Injection...

CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL Injection...

CVE-2022-37204

CVE-2022-37204 affects Final CMS 5.1.0 and is a SQL Injection vulnerability. The vulnerability stems from interfaces that concatenate SQL without proper safeguards, enabling remote exploitation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8). A PoC/exploit exists ...