Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jfinal jfinal vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2020-19146
Improper Access Control in Jfinal CMS v4.7.1 and previous versions allows remote malicious users to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinal_cms/admin/folder/list'.
Jflyfox Jfinal Cms
6.5
CVSSv3
CVE-2020-19154
Improper Access Control in Jfinal CMS v4.7.1 and previous versions allows remote malicious users to obtain sensitive information via the 'FileManager.editFile()' function in the component 'modules/filemanager/FileManagerController.java'.
Jflyfox Jfinal Cms
9.8
CVSSv3
CVE-2022-30500
Jfinal cms 5.1.0 is vulnerable to SQL Injection.
Jflyfox Jfinal Cms 5.1.0
9.8
CVSSv3
CVE-2022-37204
Final CMS 5.1.0 is vulnerable to SQL Injection.
Jflyfox Jfinal Cms 5.1.0
1 Github repository
8.8
CVSSv3
CVE-2022-37209
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
Jflyfox Jfinal Cms 5.1.0
2 Github repositories
7.2
CVSSv3
CVE-2022-38279
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
Jflyfox Jfinal Cms 5.1.0
9.8
CVSSv3
CVE-2023-30349
JFinal CMS v5.1.0 exists to contain a remote code execution (RCE) vulnerability via the ActionEnter function.
Jflyfox Jfinal Cms 5.1.0
9.8
CVSSv3
CVE-2022-37199
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Jflyfox Jfinal Cms 5.1.0
8.8
CVSSv3
CVE-2022-37201
JFinal CMS 5.1.0 is vulnerable to SQL Injection.
Jflyfox Jfinal Cms 5.1.0
1 Github repository
8.8
CVSSv3
CVE-2022-37202
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list
Jflyfox Jfinal Cms 5.1.0
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20065
open redirect
CVE-2024-1086
path traversal
CVE-2024-29825
XXE
CVE-2024-29822
CVE-2024-20696
CVE-2024-3564
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »