Skip to content
OpenAdvisories

Vendor

jflyfox

2 known vulnerabilities.

Products

jfinal_cms 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-11473

    jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

    A vulnerability was identified in jflyfox jfinal_cms up to 5.1.0. This impacts the function list of the file AdvicefeedbackController.java. Such manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The project was …

    jflyfox jfinal_cms
  • Medium 4.3
    CVE-2025-6105

    jflyfox jfinal_cms HOME.java cross-site request forgery

    A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated r…

    jflyfox jfinal_cms