552 matches found
CVE-2022-36527
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module...
CVE-2022-36527
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module...
CVE-2022-36527
CVE-2022-36527 affects Jfinal CMS v5.1.0. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web scripts or HTML via a crafted payload into the post title text field under the publish blog module. The underlying issue is the handli...
CVE-2022-36527
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module...
CVE-2022-36527: Improper Neutralization of Input During Web Page Generation
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module...
SQL injection in jflyfox jfinal
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
GHSA-WV39-F3VX-3V6Q SQL injection in jflyfox jfinal
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
GHSA-5RF4-F24C-HPVH SQL injection in jflyfox jfinal
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via the endpoint /jfinal_cms/system/role/list. The CVE-2022-37223 entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interaction. Affected component is the web application’s role-list...
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
CVE-2022-37223
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...
CVE-2022-37199
JFinal CMS 5.1.0 is affected by an SQL Injection in the endpoint /jfinal_cms/system/user/list. Multiple connected sources (Red Hat CVE entry, GHSA advisory, OSV/NVD listings) corroborate that JFinal CMS 5.1.0 is vulnerable to SQL injection via that path. The CVE description consistently states th...