CVE-2022-37204

CVE-2022-37204 CVE-2022-37204 POC Vorgeschlagene Beschreibung RESERVED JFinal CMS 5.1.0 ist anfällig für SQL-Injection. Zusätzliche Informationen https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Schwachstellentyp SQL-Injection Anbieter des Produkts die...

CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Descrição sugerida RESERVED O JFinal CMS 5.1.0 é afetado por: Injeção SQL. Essas interfaces não usam o mesmo componente, nem possuem filtros, mas cada uma usa seu próprio método de concatenação SQL, resultando em injeção SQL. Informações adicionais...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Tipo di vulnerabilità SQL Injection Fornitore del prodotto il gruppo di sviluppo Codice base del prodotto affetto https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Componente affetto...

CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Vorgeschlagene Beschreibung JFinal CMS 5.1.0 ist anfällig für SQL-Injection. Diese Schnittstellen verwenden nicht dieselbe Komponente, haben auch keine Filter, sondern jede verwendet ihre eigene SQL-Verkettungsmethode, was zu SQL-Injection führt. Zusätzliche...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Descrizione suggerita JFinal CMS 5.1.0 è affetto da: SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ognuna usa il proprio metodo di concatenazione SQL, causando SQL injection. Informazioni aggiuntive...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Prima di tutto devi installare sqlmap devi impostare dominio o IP di destinazione il tuo cookie quindi esegui lo shell root@kitploit: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Descrizione suggerita JFinal CMS 5.1.0 è affetto da: SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ciascuna usa il proprio metodo di concatenazione SQL, causando SQL injection. Informazioni aggiuntive...

CVE-2022-37208

37208 CVE-2022-37208 Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ciascuna utilizza la propria metodo di concatenazione SQL, risultando in SQL injection. Informazioni aggiuntive...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC अतिरिक्त जानकारी https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md भेद्यता प्रकार SQL इंजेक्शन उत्पाद का विक्रेता डेवलपमेंट ग्रुप प्रभावित उत्पाद कोड बेस https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 प्रभावित घटक ये...

CVE-2022-37203

CVE-2022-37203 إثبات المفهوم لـ CVE-2022-37203 معلومات إضافية https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql3.md نوع الثغرة حقن SQL البائع مجموعة التطوير قاعدة الكود المتأثرة https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 المكون المتأثر لا تستخدم هذه...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

EUVD-2026-35004

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

The CVE concerns jflyfox jfinal_cms (versions up to 5.1.0). The vulnerability is in AdvicefeedbackController.java list functionality, where improper handling of the orderBy argument enables SQL injection. This can be exploited remotely. The issue was reported early via an issue and no public resp...

PT-2026-47205

A vulnerability was identified in jflyfox jfinal cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through ...

jflyfox jfinal_cms 注入漏洞

jfinalcms is a content management system used for managing website sections, articles, and feedback content. jflyfox jfinalcms has a SQL injection vulnerability. The vulnerability arises due to the list function in the AdvicefeedbackController.java file not properly filtering the orderBy paramete...