Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.jflyfox:jflyfox_jfinal

6 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical
Registry
Maven Central

Advisories 6

  • CVE-2023-30349Critical 9.8

    JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.

    Affected: through 5.1.0.

  • Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field…

    Affected: through 5.1.0.

  • JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

    Affected: through 5.1.0.

  • JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

    Affected: through 5.1.0.

  • A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted…

    Affected: through 5.1.0.

  • Jfinal cms 5.1.0 is vulnerable to SQL Injection.

    Affected: through 5.1.0.