EUVD-2022-40864

Malicious code in bioql PyPI...

EUVD-2022-39856

Malicious code in bioql PyPI...

EUVD-2022-40867

Malicious code in bioql PyPI...

EUVD-2022-40877

Malicious code in bioql PyPI...

EUVD-2023-38689

Malicious code in bioql PyPI...

CVE-2025-6105 jflyfox jfinal_cms HOME.java cross-site request forgery

A vulnerability has been found in jflyfox jfinalcms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed...

jflyfox jfinal_cms 安全漏洞

jflyfox jfinalcms is jflyfox open source a jfinal cms is a java development of a powerful information consulting website , using a simple and powerful JFinal as a web framework , the template engine with beetl, the database with mysql, front-end bootstrap framework . Support oauth2 authentication...

PT-2025-25516 · Jflyfox · Jfinalcms

Name of the Vulnerable Software and Affected Versions: jflyfox jfinal cms version 5.0.1 Description: A cross-site request forgery issue has been identified, affecting the HOME.java file. The manipulation of the Logout argument can lead to this issue. The attack can be initiated remotely...

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability...

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution RCE vulnerability via the ActionEnter function...

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

CVE-2023-24747

Jfinal CMS v5.1 was discovered to contain a cross-site scripting XSS vulnerability via the component /system/dict/list...

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-33114

Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinalcms/system/dict/list...

CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user...

CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...

CVE-2022-36527

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module...

CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list...

CVE-2022-38284

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list...