CVE-2022-27341

CVE-2022-27341 affects JFinalCMS v2.0 and is a SQL injection vulnerability exploitable via the Article Management function. The base CVSS v2 score is 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and partial impact to confidentiality, integrity, and availability...

CVE-2024-24029

CVE-2024-24029 affects JFinalCMS 5.0.0 and is described as a SQL injection via /admin/content/data. The CVSS vector indicates NETWORK exploitation, no authentication, no user interaction, with a high impact on confidentiality, integrity, and availability (base score 9.8). The provided documents d...