CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via the endpoint /admin/article/list_approve . The connected documents confirm this vulnerability but do not provide explicit exploit details or a fixed version. Remediation recommended: upgrade to a newer JFinal CMS version that contains a fix; no ...

CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...

CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list...

CVE-2022-38272

CVE-2022-38272 affects JFinal CMS 5.1.0, with SQL Injection via the /admin/article/list endpoint. The connected sources confirm the vulnerability but do not provide explicit root-cause details in the documents; exploitation status is not described. PT-Security notes recommend updating JFinal CMS ...

CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...

CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...

CVE-2022-38275

JFinal CMS 5.1.0 is affected by an SQL Injection vulnerability exposed via the /admin/contact/list API endpoint. The issue stems from unsafely handled input in the API that leads to SQL injection, with a CVSS v3.1 base score of 7.2 (HIGH) in the NVD record. The PT-SECURITY advisory confirms the v...

CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...

CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...

CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list...

CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...

CVE-2022-38276

CVE-2022-38276 affects JFinal CMS 5.1.0 and is a SQL Injection vulnerability exploitable via the /admin/foldernotice/list endpoint. The root cause details are not fully described in the provided documents beyond the injection via that API path. The CVSSv3.1 base score is 7.2 (High) with Confident...

CVE-2022-38277

CVE-2022-38277 affects JFinal CMS 5.1.0 . The flaw is a SQL Injection at the endpoint /admin/folderrollpicture/list caused by unsafe SQL handling. According to NVD, the impact is High (C/H/I/A) with a CVSS v3.1 base score 7.2 (Vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The attack vector is net...

CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...

CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list...

CVE-2022-38278

Affected software & impact: JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/friendlylink/list endpoint. The vulnerability is documented across multiple sources, confirming the issue originates from that API path and involves improper handling of input that leads to SQL injection. R...

CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...

CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...

CVE-2022-38281

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list...

CVE-2022-38280

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list...