619 matches found
CVE-2022-37203
CVE-2022-37203 affects JFinal CMS 5.1.0. The vulnerability is a SQL injection arising because interfaces do not share a single component or apply uniform filters and each uses its own SQL concatenation method. Affected component/area is the web application interface layer of JFinal CMS, with the ...
PT-2022-23872 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. It is mentioned that certain interfaces in JFinal CMS do not utilize the same component or filters but instead use their own SQL concatenation methods, which results...
CVE-2022-37203: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
JFinal SQL注入漏洞
JFinal is a Java language based WEB + ORM open source framework . JFinal CMS version 5.1.0 SQL injection vulnerability , the vulnerability stems from the interface does not use the same components , there is no filter , but each use their own SQL connection method , resulting in SQL injection...
Exploit for CVE-2022-37210
CVE-2022-37210 CVE-2022-37210 POC Suggested description...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37209 CVE-2022-37209 POC Suggested description...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37201
CVE-2022-37201 affects JFinal CMS 5.1.0. The Red Hat/NVD/etc indicate an SQL injection in multiple interfaces (e.g., /jfinal_cms/admin/contact/list and related id/name/menu-key paths) where SQL is directly concatenated without safe parameterization, enabling remote exploitation and potential data...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37207
CVE-2022-37207 — JFinal CMS 5.1.0 is affected by SQL Injection. Interfaces do not share a common component and lack filtering; each uses its own SQL concatenation method, enabling injection. CVSS v3.1 base score 8.8 (High) with remote, low-complexity access and no user interaction; impact to conf...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...