Jfinal CMS vulnerabilities
6 known vulnerabilities in Jfinal CMS from Jflyfox. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
jfinal_cms: Cross-Site Request Forgery
A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The manipulation of the argument Logout leads to cross-site request forgery. The attack can be initiated re
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 9.8 Critical severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
- 8.8 High severity
Jfinal CMS: Improper Neutralization of Special Elements used in an SQL Command
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection