Vulnerability index

Browse CVEs

43 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Jfinal Cms HIGH 8.8
CVE-2025-6105

A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.ja…

No fix yet
Fix from $1,950 2025-06-16
Jfinal Cms CRITICAL 9.8
CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java

Mitigation only
Fix from $2,300 2024-12-02
Jfinal Cms CRITICAL 9.8
CVE-2023-47503

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the templ…

No fix yet
Fix from $2,300 2023-11-28
Jfinal Cms HIGH 7.5
CVE-2023-34645

jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

No fix yet
Fix from $1,950 2023-06-16
Jfinal Cms CRITICAL 9.8
CVE-2023-30349

JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.

No fix yet
Fix from $2,300 2023-04-27
Jfinal Cms MEDIUM 5.4
CVE-2023-24747

Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list.

Mitigation only
Fix from $1,600 2023-04-05
Jfinal Cms MEDIUM 6.1
CVE-2023-22975

A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injec…

No fix yet
Fix from $1,600 2023-02-03
Jfinal Cms HIGH 8.8
CVE-2022-37202

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list

No fix yet
Fix from $1,950 2022-10-26
Jfinal Cms HIGH 8.8
CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL …

No fix yet
Fix from $1,950 2022-10-13
Jfinal Cms HIGH 8.8
CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c…

No fix yet
Fix from $1,950 2022-09-27
Jfinal Cms HIGH 8.8
CVE-2022-37205

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c…

No fix yet
Fix from $1,950 2022-09-20
Jfinal Cms CRITICAL 9.8
CVE-2022-37204

Final CMS 5.1.0 is vulnerable to SQL Injection.

No fix yet
Fix from $2,300 2022-09-20
Jfinal Cms CRITICAL 9.8
CVE-2022-37203

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL …

No fix yet
Fix from $2,300 2022-09-19
Jfinal Cms HIGH 8.8
CVE-2022-37201

JFinal CMS 5.1.0 is vulnerable to SQL Injection.

No fix yet
Fix from $1,950 2022-09-15
Jfinal Cms HIGH 8.8
CVE-2022-37207

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL c…

No fix yet
Fix from $1,950 2022-09-15
Jfinal Cms HIGH 7.2
CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38280

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38281

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38282

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38283

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38284

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38285

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38286

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38272

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38274

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.

No fix yet
Fix from $1,950 2022-09-09
Jfinal Cms HIGH 7.2
CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

No fix yet
Fix from $1,950 2022-09-09