Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:50 a.m.•13 views

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

9.8CVSS8.1AI score0.00901EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/25 4:16 a.m.•14 views

CVE-2025-8127

A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown code of the file /system/user/list. The manipulation of the argument paramsdataScope leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

8.8CVSS5.7AI score0.0047EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/07/25 12:00 a.m.•19 views

deer-wms-2 注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source . The vulnerability exists in deerwms deer-wms-2 3.3 and earlier versions, the vulnerability stems from incorrect manipulation of the parameter paramsdataScope in the file /system/user/list resulting in SQL injection...

8.8CVSS6.8AI score0.0047EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•29 views

PT-2025-4010 · Joeybling · Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus versions up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical issue has been found in JoeyBling bootplus, affecting an unknown part of the file /admin/sys/user/list. The manipulation of the sort argument...

6.5CVSS7.2AI score0.00394EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2022/08/23 1:15 p.m.•12 views

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

9.8CVSS7.5AI score0.00901EPSS
SaveExploits1References2
Mend
Mend
•added 2022/08/23 12:54 p.m.•5 views

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

9.8CVSS0.00901EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/08/23 12:00 a.m.•5 views

PT-2022-23868

Name of the Vulnerable Software and Affected Versions JFinal CMS version 5.1.0 Description The issue is related to SQL Injection, which can be exploited via the "/jfinal cms/system/user/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations For JFinal...

9.8CVSS0.00901EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/23 12:00 a.m.•11 views

CVE-2022-37199: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...

9.8CVSS8.3AI score0.00901EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/23 12:00 a.m.•22 views

jfinal cms SQL注入漏洞

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , the template engine with beetl , database with mysql , front-end bootstrap framework . jfinal cms 5.1.0 version of a security vulnerability , the vulnerability...

9.8CVSS5.7AI score0.00901EPSS
SaveExploits1References2
Rows per page
Query Builder