JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

Published Aug 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre