Jflyfox vulnerabilities
We track 6 vulnerabilities in Jflyfox products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2025.
Latest Jflyfox vulnerabilities
- 8.8 High severity
jfinal_cms: Cross-Site Request Forgery
A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated re
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 9.8 Critical severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection