Browse CVEs

HIGH 8.8 CVE-2025-6105 A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.ja… Jfinal Cms No fix yet Fix from $1,9502025-06-16 CRITICAL 9.8 CVE-2024-53477 JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java Jfinal Cms Mitigation only Fix from $2,3002024-12-02 CRITICAL 9.8 CVE-2023-47503 An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the templ… Jfinal Cms No fix yet Fix from $2,3002023-11-28 HIGH 7.5 CVE-2023-34645 jfinal CMS 5.1.0 has an arbitrary file read vulnerability. Jfinal Cms No fix yet Fix from $1,9502023-06-16 CRITICAL 9.8 CVE-2023-30349 JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function. Jfinal Cms No fix yet Fix from $2,3002023-04-27 MEDIUM 5.4 CVE-2023-24747 Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list. Jfinal Cms Mitigation only Fix from $1,6002023-04-05 MEDIUM 6.1 CVE-2023-22975 A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injec… Jfinal Cms No fix yet Fix from $1,6002023-02-03 HIGH 8.8 CVE-2022-37202 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list Jfinal Cms No fix yet Fix from $1,9502022-10-26 HIGH 8.8 CVE-2022-37208 JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL … Jfinal Cms No fix yet Fix from $1,9502022-10-13 HIGH 8.8 CVE-2022-37209 JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c… Jfinal Cms No fix yet Fix from $1,9502022-09-27 HIGH 8.8 CVE-2022-37205 JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c… Jfinal Cms No fix yet Fix from $1,9502022-09-20 CRITICAL 9.8 CVE-2022-37204 Final CMS 5.1.0 is vulnerable to SQL Injection. Jfinal Cms No fix yet Fix from $2,3002022-09-20 CRITICAL 9.8 CVE-2022-37203 JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL … Jfinal Cms No fix yet Fix from $2,3002022-09-19 HIGH 8.8 CVE-2022-37201 JFinal CMS 5.1.0 is vulnerable to SQL Injection. Jfinal Cms No fix yet Fix from $1,9502022-09-15 HIGH 8.8 CVE-2022-37207 JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c… Jfinal Cms No fix yet Fix from $1,9502022-09-15 HIGH 7.2 CVE-2022-38277 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38278 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38279 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38280 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38281 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38282 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38283 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38284 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38285 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38286 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38272 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38273 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38274 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38275 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09 HIGH 7.2 CVE-2022-38276 JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. Jfinal Cms No fix yet Fix from $1,9502022-09-09