632 matches found
CVE-2024-24375
A SQL injection vulnerability exists in Jfinalcms v.5.0.0 , a content management system. A remote attacker can exploit the /admin/admin API endpoint by targeting the name parameter to obtain sensitive information . As a mitigation, it is recommended to avoid using the name parameter in this endpo...
CVE-2024-24375
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...
PT-2024-20374 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information. The issue is related to the /admin/admin API endpoint, specifically the name parameter. Recommendations: For Jfinalcms versio...
CVE-2024-24375
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...
CVE-2024-24375: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
Sql injection
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
JFinalCMS Security Vulnerability
JFinalCMS is a content management system by heyewei personal developer. A security vulnerability exists in JFinalCMS version 5.0.0, which was discovered to contain an SQL injection vulnerability via /admin/content/data...
CVE-2024-24029: Improper Neutralization of Special Elements used in an SQL Command
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
PT-2024-20246
Name of the Vulnerable Software and Affected Versions JFinalCMS version 5.0.0 Description The issue is related to SQL injection via the "/admin/content/data" API endpoint. This allows for potential data manipulation. No information is provided about the estimated number of affected devices or...
CVE-2024-24029
CVE-2024-24029 affects JFinalCMS 5.0.0 and is described as a SQL injection via /admin/content/data. The CVSS vector indicates NETWORK exploitation, no authentication, no user interaction, with a high impact on confidentiality, integrity, and availability (base score 9.8). The provided documents d...
Cross-site Scripting (XSS)
JFinalcms is vulnerable to Cross-site Scripting XSS. The vulnerability is due to a lack of parameter sanitization which allows attackers to run arbitrary JavaScript code via the /admin/login username parameter...
GHSA-QH2W-9M7W-HJG2 Cross-site Scripting in JFinal
Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...
Cross-site Scripting in JFinal
Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...