Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 45

Export CSV
CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

CVSS 3.1 · 5.3 Medium EPSS 12.4% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2024-8782

JFinalCMS edit delete path traversal

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Heyewei Jfinalcms Project
Products
Jfinalcms Jfinalcms