439 matches found
CVE-2022-37209
CVE-2022-37209 affects JFinal CMS 5.1.0. The vulnerability is a SQL Injection caused by multiple interfaces not using the same component and lacking filters, with each interface using its own SQL concatenation method, enabling injection. CVSSv3.1 scores indicate high risk (8.8) with network attac...
CVE-2022-37209
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37209
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
PT-2022-23877 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL injection. It is mentioned that the affected interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQ...
CVE-2022-37205
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37205
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37205
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37205
CVE-2022-37205 affects JFinal CMS 5.1.0. SQL Injection stems from multiple interfaces using their own SQL concatenation without filters, enabling high-impact access (C/H, I/H, A/H) per CVSS 3.1. Exploitation PoC exists on GitHub (AgainstTheLight) and a related exploit repo is linked in the connec...
CVE-2022-37205
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37203
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37203
CVE-2022-37203 affects JFinal CMS 5.1.0. The vulnerability is a SQL injection arising because interfaces do not share a single component or apply uniform filters and each uses its own SQL concatenation method. Affected component/area is the web application interface layer of JFinal CMS, with the ...
CVE-2022-37203
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37203
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
PT-2022-23872 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. It is mentioned that certain interfaces in JFinal CMS do not utilize the same component or filters but instead use their own SQL concatenation methods, which results...
Exploit for CVE-2022-37210
CVE-2022-37210 CVE-2022-37210 POC Suggested description...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37209 CVE-2022-37209 POC Suggested description...