CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

CVE-2023-41599: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

PT-2023-27992 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: An issue in the component /common/DownController.java of JFinalCMS allows attackers to execute a directory traversal. Recommendations: For JFinalCMS version 5.0.0, consider restricting access to the...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

Sql injection

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

CVE-2022-27341 affects JFinalCMS v2.0 and is a SQL injection vulnerability exploitable via the Article Management function. The base CVSS v2 score is 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and partial impact to confidentiality, integrity, and availability...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

CVE-2022-27341: Improper Neutralization of Special Elements used in an SQL Command

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...

PT-2022-18384

Name of the Vulnerable Software and Affected Versions JFinalCMS version 2.0 Description The issue is related to a SQL injection vulnerability in the Article Management function. This vulnerability allows for the injection of malicious SQL code, potentially leading to unauthorized access or...