Jflyfox Jfinal Cms vulnerabilities

• jflyfox jfinal cms jflyfox jfinal_cms AdvicefeedbackController.java list sql injection CVE-2026-11473 5.3 MediumJune 8, 2026
• jflyfox jfinal cms jflyfox jfinal_cms HOME.java cross-site request forgery CVE-2025-6105 5.3 MediumJune 16, 2025
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization... CVE-2024-53477 9.8 CriticalDecember 2, 2024
• jflyfox jfinal cms An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a... CVE-2023-47503 9.8 CriticalNovember 28, 2023
• jflyfox jfinal cms jfinal CMS 5.1.0 has an arbitrary file read vulnerability. CVE-2023-34645 7.5 HighJune 16, 2023
• jflyfox jfinal cms Remote code execution in JFinal CMS CVE-2023-30349 9.8 CriticalApril 27, 2023
• jflyfox jfinal cms Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the... CVE-2023-24747 5.4 MediumApril 5, 2023
• jflyfox jfinal cms jfinal_cms 5.1.0 is vulnerable to Cross Site Scripting (XSS). CVE-2023-22975 6.1 MediumFebruary 3, 2023
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list CVE-2022-37202 Public exploit 8.8 HighOctober 26, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component,... CVE-2022-37208 Public exploit 8.8 HighOctober 13, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component,... CVE-2022-37209 Public exploit 8.8 HighSeptember 27, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component,... CVE-2022-37205 Public exploit 8.8 HighSeptember 20, 2022
• jflyfox jfinal cms Final CMS 5.1.0 is vulnerable to SQL Injection. CVE-2022-37204 Public exploit 9.8 CriticalSeptember 20, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component,... CVE-2022-37203 Public exploit 9.8 CriticalSeptember 19, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection. CVE-2022-37201 Public exploit 8.8 HighSeptember 15, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component,... CVE-2022-37207 Public exploit 8.8 HighSeptember 15, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. CVE-2022-38274 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. CVE-2022-38273 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. CVE-2022-38272 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. CVE-2022-38275 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. CVE-2022-38277 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. CVE-2022-38276 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. CVE-2022-38278 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. CVE-2022-38279 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. CVE-2022-38281 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. CVE-2022-38280 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. CVE-2022-38282 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. CVE-2022-38284 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. CVE-2022-38283 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. CVE-2022-38285 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. CVE-2022-38286 7.2 HighSeptember 9, 2022
• jflyfox jfinal cms Jfinal Cross-site Scripting vulnerability CVE-2022-36527 5.4 MediumAugust 25, 2022
• jflyfox jfinal cms SQL injection in jflyfox jfinal CVE-2022-37223 9.8 CriticalAugust 23, 2022
• jflyfox jfinal cms SQL injection in jflyfox jfinal CVE-2022-37199 9.8 CriticalAugust 23, 2022
• jflyfox jfinal cms JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user. CVE-2022-34928 8.8 HighAugust 3, 2022
• jflyfox jfinal cms Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal... CVE-2022-33114 7.2 HighJune 23, 2022
• jflyfox jfinal cms Cross-site Scripting in Jfinal CMS CVE-2022-33113 5.4 MediumJune 23, 2022
• jflyfox jfinal cms Cross site scripting in Jfinal CVE-2022-29648 5.4 MediumMay 31, 2022
• jflyfox jfinal cms SQL injection in jflyfox jfinal CVE-2022-30500 9.8 CriticalMay 26, 2022
• jflyfox jfinal cms A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller... CVE-2021-42242 9.8 CriticalMay 5, 2022
• jflyfox jfinal cms Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java. CVE-2022-28505 7.2 HighMay 3, 2022
• jflyfox jfinal cms Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the... CVE-2022-27111 5.4 MediumApril 11, 2022
• jflyfox jfinal cms In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS.... CVE-2021-46087 5.4 MediumJanuary 25, 2022
• jflyfox jfinal cms JFinal_cms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service. CVE-2021-37262 7.5 HighDecember 16, 2021
• jflyfox jfinal cms Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via ... CVE-2021-40639 7.5 HighSeptember 15, 2021
• jflyfox jfinal cms Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain... CVE-2020-19155 8.8 HighSeptember 15, 2021
• jflyfox jfinal cms Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain... CVE-2020-19154 6.5 MediumSeptember 15, 2021
• jflyfox jfinal cms Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary... CVE-2020-19151 8.8 HighSeptember 15, 2021
• jflyfox jfinal cms Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain... CVE-2020-19150 8.1 HighSeptember 15, 2021
• jflyfox jfinal cms Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute... CVE-2020-19148 5.4 MediumSeptember 15, 2021
• Show olderLoading…