PT-2025-3532 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 1.0 Description: The issue is related to SQL Injection in the Content.java file. The cause of the problem is that the title parameter is controllable and is concatenated directly into filterSql without filtering. This allows...