7 matches found
EUVD-2024-27517
Malicious code in bioql PyPI...
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data...
CVE-2024-12351
A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\main\java\com\cms\entity\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection. It is possible to initiate the...
CVE-2024-57665
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering...
CVE-2024-57665
JFinalCMS version 1.0 is vulnerable to SQL Injection within the rc/main/java/com/cms/entity/Content.java file. The vulnerability exists because the title parameter is user-controllable and is concatenated directly into filterSql without proper filtering. This flaw could allow an attacker to execu...
