Browse CVEs

HIGH 8.8 CVE-2024-40322 An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data Jfinalcms No fix yet Fix from $1,9502024-07-16 MEDIUM 6.1 CVE-2023-51254 Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship lin… Jfinalcms No fix yet Fix from $1,6002024-04-29 HIGH 7.5 CVE-2024-24375 SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter. Jfinalcms No fix yet Fix from $1,9502024-03-07 CRITICAL 9.8 CVE-2024-24029 JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data. Jfinalcms No fix yet Fix from $2,3002024-02-02 MEDIUM 6.1 CVE-2024-22497 Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. Jfinalcms No fix yet Fix from $1,6002024-01-23 MEDIUM 6.1 CVE-2024-22496 Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. Jfinalcms No fix yet Fix from $1,6002024-01-23 MEDIUM 5.4 CVE-2024-22492 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web… Jfinalcms No fix yet Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2024-22493 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web… Jfinalcms No fix yet Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2024-22494 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web … Jfinalcms No fix yet Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2023-50136 Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom tabl… Jfinalcms No fix yet Fix from $1,6002024-01-09 MEDIUM 5.4 CVE-2023-50100 JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. Jfinalcms No fix yet Fix from $1,6002023-12-14 MEDIUM 5.4 CVE-2023-50101 JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. Jfinalcms No fix yet Fix from $1,6002023-12-14 MEDIUM 5.4 CVE-2023-50102 JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). Jfinalcms No fix yet Fix from $1,6002023-12-14 MEDIUM 5.4 CVE-2023-50137 JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. Jfinalcms No fix yet Fix from $1,6002023-12-14 HIGH 7.5 CVE-2023-50449 JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. Jfinalcms No fix yet Fix from $1,9502023-12-10 MEDIUM 5.4 CVE-2023-49485 JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. Jfinalcms No fix yet Fix from $1,6002023-12-08 MEDIUM 5.4 CVE-2023-49486 JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. Jfinalcms Mitigation only Fix from $1,6002023-12-08 MEDIUM 5.4 CVE-2023-49487 JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. Jfinalcms Mitigation only Fix from $1,6002023-12-08 HIGH 8.8 CVE-2023-49377 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49378 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49379 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49380 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49381 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49382 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49383 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49395 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49396 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49397 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49398 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. Jfinalcms No fix yet Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-49446 JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. Jfinalcms No fix yet Fix from $1,9502023-12-05