Heyewei vulnerabilities
We track 2 vulnerabilities in Heyewei products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2025.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Heyewei vulnerabilities
- 9.8 Critical severity
Jfinalcms: Improper Neutralization of Special Elements used in an SQL Command
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering.
- 7.2 High severity
JFinalCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injecti