439 matches found
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection...
CVE-2022-37201
CVE-2022-37201 affects JFinal CMS 5.1.0. The Red Hat/NVD/etc indicate an SQL injection in multiple interfaces (e.g., /jfinal_cms/admin/contact/list and related id/name/menu-key paths) where SQL is directly concatenated without safe parameterization, enabling remote exploitation and potential data...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
CVE-2022-37207
CVE-2022-37207 — JFinal CMS 5.1.0 is affected by SQL Injection. Interfaces do not share a common component and lack filtering; each uses its own SQL concatenation method, enabling injection. CVSS v3.1 base score 8.8 (High) with remote, low-complexity access and no user interaction; impact to conf...
CVE-2022-37207
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37207 CVE-2022-37207 POC Suggested description...
Exploit for CVE-2022-37206
CVE-2022-37206 CVE-2022-37206 POC ------------------------...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37204 CVE-2022-37204 POC Suggested description...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37202 CVE-2022-37202 POC Suggested description...
Exploit for SQL Injection in Jflyfox Jfinal_Cms
CVE-2022-37201 CVE-2022-37201 POC POC First of all you...
PT-2022-23870 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PT-2022-23875 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL injection. It affects interfaces that do not use the same component or have filters but instead use their own SQL concatenation methods, resulting in SQL injection...
CVE-2022-38281
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...