EUVD-2022-40869

Malicious code in bioql PyPI...

EUVD-2022-32947

Malicious code in bioql PyPI...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2025-3214

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability is the function engine.getTemplate of the file /readTemplate. The manipulation of the argument template leads to path traversal. The attack can be launched remotely. The exploit...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...