531 matches found
CVE-2023-41599
CVE-2023-41599 : JFinalCMS v5.0.0 contains a directory traversal vulnerability in /common/DownController.java. Unauthenticated attackers can read arbitrary files from the server via path traversal in the filekey parameter, potentially exposing credentials and sensitive CMS content. The connected ...
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
JFinalCMS 路径遍历漏洞
JFinalCMS is a java developed information consulting website. JFinalCMS suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system...
PT-2023-27992 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: An issue in the component /common/DownController.java of JFinalCMS allows attackers to execute a directory traversal. Recommendations: For JFinalCMS version 5.0.0, consider restricting access to the...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
Sql injection
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function...
CVE-2022-27341
CVE-2022-27341 affects JFinalCMS v2.0 and is a SQL injection vulnerability exploitable via the Article Management function. The base CVSS v2 score is 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and partial impact to confidentiality, integrity, and availability...
