Jflyfox: Security Vulnerabilities
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.
CVSS Score
7.2
EPSS Score
0.002
Published
2022-09-09
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
CVSS Score
5.4
EPSS Score
0.001
Published
2022-08-25
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-08-23