PT-2022-20144

Name of the Vulnerable Software and Affected Versions Jfinal cms version 5.1.0 Description The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

Jfinal CMS SQL注入漏洞

Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...

Jfinal CMS Command Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...

Jfinal CMS SQL Injection Vulnerability

Jfinal CMS is a java development information consulting website. jfinal CMS version 5.1.0 is vulnerable to SQL injection, which originates from com.jflyfox.system.log.LogController.java missing validation of external input SQL statements. An attacker could use this vulnerability to execute illega...

CVE-2021-42242

A command execution vulnerability exists in jfinalcms 5.0.1 via com.jflyfox.component.controller.Ueditor...

PT-2022-11577

Name of the Vulnerable Software and Affected Versions jfinal cms version 5.0.1 Description A command execution issue exists via the com.jflyfox.component.controller.Ueditor component. Recommendations For jfinal cms version 5.0.1, consider restricting access to the...

CVE-2022-28505

Jfinalcms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java...

Jfinal CMS SQL注入漏洞

Jfinal CMS is a java development information consulting website. jfinal CMS version 5.1.0 is vulnerable to SQL injection, which originates from com.jflyfox.system.log.LogController.java missing validation of external input SQL statements. An attacker could use this vulnerability to execute illega...

PT-2022-19057

Name of the Vulnerable Software and Affected Versions Jfinal cms version 5.1.0 Description The issue concerns SQL Injection via the com.jflyfox.system.log.LogController.java file. No information is provided about the estimated number of potentially affected devices worldwide or real-world inciden...

JFinal SQL注入漏洞

JFinal is a Java-based open source framework for WEB + ORM . JFinal CMS v2.0 version of the SQL injection vulnerability , the vulnerability stems from the lack of article management function for SQL data filtering and escaping...

Jfinal CMS Cross-Site Scripting Vulnerability (CNVD-2022-81357)

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...

CVE-2022-27111

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...

PT-2022-18229

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0 Description The issue allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. This can potentially lead to unauthorized access or control of the administrat...

Jfinal CMS跨站脚本漏洞

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1.0 has a cross-site scripting vulnerability, the vulnerability...

Jfinal CMS Cross-Site Scripting Vulnerability

Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS cross-site scripting vulnerability , the vulnerability stems from the...

CVE-2021-46087

In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...

PT-2022-12562

Name of the Vulnerable Software and Affected Versions jfinal cms versions 5.1.0 and later Description The issue is related to a storage XSS vulnerability in the background system of the CMS. This occurs because the developers do not filter the parameters submitted by the user input form, allowing...

CVE-2021-37262

JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...

PT-2021-21594

Name of the Vulnerable Software and Affected Versions JFinal cms version 5.1.0 Description The issue is related to regex injection, which may lead to Denial of Service. Recommendations For JFinal cms version 5.1.0, at the moment, there is no information about a newer version that contains a fix f...

Jfinal cms improper access control vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the JFinal web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS 4.7.1 and earlier versions exist improper access control vulnerabilities. An attacker can use the...