CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module...

CVE-2023-47503

CVE-2023-47503 affects jflyfox jfinalCMS v5.1.0. Root cause: login.jsp in the template management module not properly restricted, enabling remote attackers to execute arbitrary code via a crafted script. Documented impact is arbitrary code execution with high severity (NVD CVSS 3.1 base score 9.8...

GHSA-5RF4-F24C-HPVH SQL injection in jflyfox jfinal

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

SQL injection in jflyfox jfinal

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/role/list...

CVE-2021-42242

A command execution vulnerability exists in jfinalcms 5.0.1 via com.jflyfox.component.controller.Ueditor...

SQL Injection Vulnerability in Jflyfox Blog System

Jflyfox is a java development of a powerful blog system . A SQL injection vulnerability exists in the Jflyfox blog system, which can be exploited by an attacker to obtain sensitive information from the database...