Jfinal Cms Security Vulnerabilities and Issues — Jfinal Cms CVE List

Lucene search

JflyfoxJfinal Cms

4 matches found

CVE•added 2022/08/23 1:15 p.m.•75 views

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

9.8CVSS9.8AI score0.00077EPSS

CVE•added 2022/08/23 2:15 p.m.•74 views

CVE-2022-37223

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

9.8CVSS9.8AI score0.00077EPSS

CVE•added 2022/08/25 7:15 p.m.•66 views

CVE-2022-36527

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.

5.4CVSS5.7AI score0.00099EPSS

CVE•added 2022/08/03 1:15 a.m.•43 views

CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

8.8CVSS8.9AI score0.00078EPSS