Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 52

Export CSV
CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-37223

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-37207

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-37203

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-36527

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-33114

Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal_cms/system/dict/list.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-33113

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-29648

A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-28505

Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms