Total
45 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-22975 | 1 Jflyfox | 1 Jfinal Cms | 2023-02-09 | N/A | 6.1 MEDIUM |
| jfinal_cms 5.1.0 is vulnerable to Cross Site Scripting (XSS). | |||||
| CVE-2022-37202 | 1 Jflyfox | 1 Jfinal Cms | 2022-10-28 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list | |||||
| CVE-2020-19155 | 1 Jflyfox | 1 Jfinal Cms | 2022-10-26 | 6.5 MEDIUM | 8.8 HIGH |
| Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' function in the component 'modules/filemanager/FileManagerController.java'. | |||||
| CVE-2022-37208 | 1 Jflyfox | 1 Jfinal Cms | 2022-10-13 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37209 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-29 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37205 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-21 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37204 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-21 | N/A | 9.8 CRITICAL |
| Final CMS 5.1.0 is vulnerable to SQL Injection. | |||||
| CVE-2022-37203 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-21 | N/A | 9.8 CRITICAL |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. | |||||
| CVE-2022-37201 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-19 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection. | |||||
| CVE-2022-37207 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-18 | N/A | 8.8 HIGH |
| JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection | |||||
| CVE-2022-38285 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. | |||||
| CVE-2022-38284 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. | |||||
| CVE-2022-38286 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. | |||||
| CVE-2022-38282 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. | |||||
| CVE-2022-38283 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. | |||||
| CVE-2022-38277 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. | |||||
| CVE-2022-38278 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. | |||||
| CVE-2022-38279 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. | |||||
| CVE-2022-38280 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. | |||||
| CVE-2022-38281 | 1 Jflyfox | 1 Jfinal Cms | 2022-09-13 | N/A | 7.2 HIGH |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. | |||||