Export limit exceeded: 12175 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 45

Export CSV
CVE-2023-49372

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

CVSS 3.1 · 5.3 Medium EPSS 12.4% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2022-27341

JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2024-8782

JFinalCMS edit delete path traversal

A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Heyewei Jfinalcms Project
Products
Jfinalcms Jfinalcms