com.jflyfox:jflyfox_jfinal

6 results · Feed

• Critical 9.8
  CVE-2023-30349

  Remote code execution in JFinal CMS

  JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.

  com.jflyfox:jflyfox_jfinal Maven
  Apr 27, 2023
• Medium 5.4
  CVE-2022-36527

  Jfinal Cross-site Scripting vulnerability

  Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.

  com.jflyfox:jflyfox_jfinal Maven
  Aug 25, 2022
• Critical 9.8
  CVE-2022-37223

  SQL injection in jflyfox jfinal

  JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

  com.jflyfox:jflyfox_jfinal Maven
  Aug 23, 2022
• Critical 9.8
  CVE-2022-37199

  SQL injection in jflyfox jfinal

  JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

  com.jflyfox:jflyfox_jfinal Maven
  Aug 23, 2022
• Medium 5.4
  CVE-2022-29648

  Cross site scripting in Jfinal

  A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.

  com.jflyfox:jflyfox_jfinal Maven
  May 31, 2022
• High —
  CVE-2022-30500

  SQL injection in jflyfox jfinal

  Jfinal cms 5.1.0 is vulnerable to SQL Injection.

  com.jflyfox:jflyfox_jfinal Maven
  May 26, 2022