Description JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. References https://github.com/jflyfox/jfinal_cms/issues/51