Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
HeyeweiJfinalcms

7 matches found

CVE
CVE•added 2024/03/17 11:15 p.m.•62 views

CVE-2024-2568

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotely...

7.2CVSS5.2AI score0.00125EPSS
CVE
CVE•added 2024/09/11 9:15 p.m.•49 views

CVE-2024-8694

A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function update of the file /admin/template/update of the component com.cms.controller.admin.TemplateController. The manipulation of the argument fileName leads to path traversal. It is pos...

5.1CVSS4.3AI score0.00539EPSS
CVE
CVE•added 2024/09/13 6:15 p.m.•46 views

CVE-2024-8782

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS6.8AI score0.00078EPSS
CVE
CVE•added 2024/05/26 10:15 p.m.•43 views

CVE-2024-5379

A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been discl...

5.4CVSS3.7AI score0.00897EPSS
CVE
CVE•added 2024/09/12 12:15 a.m.•43 views

CVE-2024-8706

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The manipulation of the argument fileName leads to path traversal. It is possible to initiat...

6.5CVSS4.7AI score0.00407EPSS
CVE
CVE•added 2024/05/24 9:15 a.m.•42 views

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the ...

5.4CVSS3.4AI score0.00547EPSS
CVE
CVE•added 2025/01/29 11:15 p.m.•39 views

CVE-2024-57665

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering.

9.8CVSS7.6AI score0.0008EPSS