Jfinalcms Project vulnerabilities
We track 5 vulnerabilities in Jfinalcms Project products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2024.
Latest Jfinalcms Project vulnerabilities
- 8.8 High severity
JFinalCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\main\java\com\cms\entity\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql inje
- 8.8 High severity
JFinalCMS: Improper Control of Generation of Code
A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update of the file \src\main\java\com\cms\controller\admin\TemplateController.java of the component Template Handler. The manipulation of the argu
- 8.8 High severity
JFinalCMS: Cross-Site Request Forgery
A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely.
- 9.8 Critical severity
JFinalCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The e
- 7.2 High severity
JFinalCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injecti