JFinal SQL注入漏洞

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/contact/list SQL injection vulnerability...

CVE-2022-38279: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...

PT-2022-24327 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/article/list approve" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the...

PT-2022-24336 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/site/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations: For JFinal CMS...

JFinal SQL注入漏洞

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /system/menu/list SQL injection vulnerability...

PT-2022-24331 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/folderrollpicture/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the...

CVE-2022-38273: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...

PT-2022-24329 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/contact/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue...

CVE-2022-38283: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list...

CVE-2022-38286: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list...

PT-2022-24339 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/system/department/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue...

CVE-2022-38272: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...

CVE-2022-38280: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...

CVE-2022-38285: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list...

PT-2022-24338 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/video/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue...

CVE-2022-38282: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list...

PT-2022-24332 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/friendlylink/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the...

PT-2022-24337 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/videoalbum/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue. At the moment...

PT-2022-24326 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue allows for SQL Injection via the "/admin/article/list" API endpoint. Recommendations: For JFinal CMS version 5.1.0, update to a newer version that contains a fix for this issue...

JFinal SQL注入漏洞

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/videoalbum/list SQL injection vulnerability...