Lucene search

K

Jfinal Cms Security Vulnerabilities

cve
cve

CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management...

9.8CVSS

8.3AI Score

0.003EPSS

2023-11-28 02:15 AM
11
cve
cve

CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read...

7.5CVSS

7.5AI Score

0.001EPSS

2023-06-16 06:15 PM
14
cve
cve

CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter...

9.8CVSS

9.9AI Score

0.005EPSS

2023-04-27 02:15 PM
18
cve
cve

CVE-2023-24747

Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component...

5.4CVSS

5.4AI Score

0.001EPSS

2023-04-05 08:15 PM
12
cve
cve

CVE-2023-22975

A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under...

6.1CVSS

5.8AI Score

0.001EPSS

2023-02-03 05:15 PM
83
cve
cve

CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

8.8CVSS

9AI Score

0.001EPSS

2022-10-26 06:15 PM
27
4
cve
cve

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL...

8.8CVSS

9AI Score

0.001EPSS

2022-10-13 12:15 PM
22
cve
cve

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL...

8.8CVSS

9.1AI Score

0.001EPSS

2022-09-27 11:15 PM
23
2
cve
cve

CVE-2022-37205

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL...

8.8CVSS

9.1AI Score

0.001EPSS

2022-09-20 06:15 PM
18
2
cve
cve

CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL...

9.8CVSS

9.5AI Score

0.002EPSS

2022-09-20 05:15 PM
19
4
cve
cve

CVE-2022-37203

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL...

9.8CVSS

9.7AI Score

0.002EPSS

2022-09-19 04:15 PM
20
5
cve
cve

CVE-2022-37201

JFinal CMS 5.1.0 is vulnerable to SQL...

8.8CVSS

8.8AI Score

0.001EPSS

2022-09-15 04:15 PM
19
6
cve
cve

CVE-2022-37207

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL...

8.8CVSS

9.1AI Score

0.001EPSS

2022-09-15 03:15 PM
24
10
cve
cve

CVE-2022-38281

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
23
5
cve
cve

CVE-2022-38286

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
22
8
cve
cve

CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
20
6
cve
cve

CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
22
5
cve
cve

CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
27
5
cve
cve

CVE-2022-38282

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
20
5
cve
cve

CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
23
5
cve
cve

CVE-2022-38284

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.3AI Score

0.001EPSS

2022-09-09 02:15 PM
20
4
cve
cve

CVE-2022-38283

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
23
6
cve
cve

CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
26
5
cve
cve

CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
19
5
cve
cve

CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
24
5
cve
cve

CVE-2022-38280

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
20
5
cve
cve

CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.4AI Score

0.001EPSS

2022-09-09 02:15 PM
23
6
cve
cve

CVE-2022-38285

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

7.2CVSS

7.3AI Score

0.001EPSS

2022-09-09 02:15 PM
24
4
cve
cve

CVE-2022-36527

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog...

5.4CVSS

5.7AI Score

0.001EPSS

2022-08-25 07:15 PM
49
2
cve
cve

CVE-2022-37223

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

9.8CVSS

9.8AI Score

0.002EPSS

2022-08-23 02:15 PM
52
9
cve
cve

CVE-2022-37199

JFinal CMS 5.1.0 is vulnerable to SQL Injection via...

9.8CVSS

9.8AI Score

0.002EPSS

2022-08-23 01:15 PM
56
4
cve
cve

CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via...

8.8CVSS

9AI Score

0.001EPSS

2022-08-03 01:15 AM
26
3