SQL Injection Vulnerability in JFinalOA Frontend

JFinalOA is based on the JFinal framework for the development of enterprise office systems . JFinalOA front-end SQL injection vulnerability can be exploited by attackers to obtain sensitive database information...

Command execution vulnerability in jfinal cms

jfinal cms, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. jfinal cms has a command execution vulnerability that can be exploited by an attacker to obtain server administrative privileges...

XSS Vulnerability at jfinal cms publishing blog posts

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms publish blog posts at the existence of XSS vulnerabilities , attackers...

Jfinal cms xss vulnerability at frontend comments

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Support for multi-site , oauth2 authentication , account registration , password encryption , comments and replies , message alerts , site visits...

Weak password vulnerability in EOVA

EOVA is a simple development platform developed using the JFinal framework. EOVA suffers from a weak password vulnerability that can be exploited by an attacker to log in to the system and obtain sensitive information...