CVE-2022-37203

CVE-2022-37203 CVE-2022-37203 POC Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql3.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de développement Code base du produit affecté https://github.com/jflyfox/jfinalcms -...

CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Description suggérée JFinal CMS 5.1.0 est vulnérable à l'injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations supplémentaires...

CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Description suggérée JFinal CMS 5.1.0 est affecté par : injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations supplémentaires...

CVE-2022-37204

CVE-2022-37204 CVE-2022-37204 POC Description suggérée RESERVED JFinal CMS 5.1.0 est vulnérable à une injection SQL. Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de...

CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Description suggérée RESERVED JFinal CMS 5.1.0 est affecté par : Injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, ce qui entraîne une injection SQL. Informations...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Description suggérée JFinal CMS 5.1.0 est vulnérable aux injections SQL. Type de vulnérabilité Injection SQL Fournisseur du produit le groupe de développement Base de code du produit affecté https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Composant affect...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Description suggérée JFinal CMS 5.1.0 est affecté par : injection SQL. Ces interfaces n'utilisent pas le même composant, ni ne possèdent de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de développement Code de base du produit affecté https://github.com/jflyfox/jfinalcms -...

CVE-2022-37208

37208 CVE-2022-37208 Предполагаемое описание JFinal CMS 5.1.0 уязвим для SQL-инъекций. Эти интерфейсы не используют один и тот же компонент и не имеют фильтров, но каждый использует свой собственный метод конкатенации SQL, что приводит к SQL-инъекции. Дополнительная информация...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Tout d'abord, vous devez installer sqlmap vous devez définir domaine cible ou IP votre cookie puis exécutez le shell sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

jflyfox jfinal_cms SQL injection vulnerability

jfinalcms is a content management system used for managing website sections, articles, and feedback content. jflyfox jfinalcms has a SQL injection vulnerability. The vulnerability arises due to the list function in the AdvicefeedbackController.java file not properly filtering the orderBy paramete...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

EUVD-2026-35004

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473 jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

A vulnerability was identified in jflyfox jfinalcms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through a...

CVE-2026-11473

The CVE concerns jflyfox jfinal_cms (versions up to 5.1.0). The vulnerability is in AdvicefeedbackController.java list functionality, where improper handling of the orderBy argument enables SQL injection. This can be exploited remotely. The issue was reported early via an issue and no public resp...

PT-2026-47205

A vulnerability was identified in jflyfox jfinal cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was informed of the problem early through ...