619 matches found
CVE-2022-38272
CVE-2022-38272 affects JFinal CMS 5.1.0, with SQL Injection via the /admin/article/list endpoint. The connected sources confirm the vulnerability but do not provide explicit root-cause details in the documents; exploitation status is not described. PT-Security notes recommend updating JFinal CMS ...
CVE-2022-38272
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...
CVE-2022-38275
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...
CVE-2022-38275
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...
CVE-2022-38275
JFinal CMS 5.1.0 is affected by an SQL Injection vulnerability exposed via the /admin/contact/list API endpoint. The issue stems from unsafely handled input in the API that leads to SQL injection, with a CVSS v3.1 base score of 7.2 (HIGH) in the NVD record. The PT-SECURITY advisory confirms the v...
CVE-2022-38277
CVE-2022-38277 affects JFinal CMS 5.1.0 . The flaw is a SQL Injection at the endpoint /admin/folderrollpicture/list caused by unsafe SQL handling. According to NVD, the impact is High (C/H/I/A) with a CVSS v3.1 base score 7.2 (Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The attack vector is net...
CVE-2022-38276
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
CVE-2022-38276
CVE-2022-38276 affects JFinal CMS 5.1.0 and is a SQL Injection vulnerability exploitable via the /admin/foldernotice/list endpoint. The root cause details are not fully described in the provided documents beyond the injection via that API path. The CVSSv3.1 base score is 7.2 (High) with Confident...
CVE-2022-38277
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
CVE-2022-38277
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...
CVE-2022-38276
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...
CVE-2022-38278
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
CVE-2022-38278
Affected software & impact: JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/friendlylink/list endpoint. The vulnerability is documented across multiple sources, confirming the issue originates from that API path and involves improper handling of input that leads to SQL injection. R...
CVE-2022-38278
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...
CVE-2022-38279
JFinal CMS 5.1.0 is affected by a SQL Injection vulnerability exposed via the /admin/imagealbum/list endpoint. The issue is documented as CVE-2022-38279 with an impact profile indicating high severity (CVSS 3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The available connected sources confirm the aff...
CVE-2022-38280
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...