Show filters
113 Total Results
Displaying 11-20 of 113
Sort by:
Attacker Value
Unknown
CVE-2024-5379
Disclosure Date: May 26, 2024 (last updated May 27, 2024)
A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266291.
0
Attacker Value
Unknown
CVE-2024-5310
Disclosure Date: May 24, 2024 (last updated May 24, 2024)
A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266121 was assigned to this vulnerability.
0
Attacker Value
Unknown
CVE-2024-2568
Disclosure Date: March 17, 2024 (last updated April 11, 2024)
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257071.
0
Attacker Value
Unknown
CVE-2024-24029
Disclosure Date: February 02, 2024 (last updated February 07, 2024)
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
0
Attacker Value
Unknown
CVE-2024-22497
Disclosure Date: January 23, 2024 (last updated January 30, 2024)
Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.
0
Attacker Value
Unknown
CVE-2024-22496
Disclosure Date: January 23, 2024 (last updated January 30, 2024)
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.
0
Attacker Value
Unknown
CVE-2024-22494
Disclosure Date: January 12, 2024 (last updated January 19, 2024)
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML.
0
Attacker Value
Unknown
CVE-2024-22493
Disclosure Date: January 12, 2024 (last updated January 21, 2024)
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.
0
Attacker Value
Unknown
CVE-2024-22492
Disclosure Date: January 12, 2024 (last updated January 21, 2024)
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML.
0
Attacker Value
Unknown
CVE-2023-50136
Disclosure Date: January 09, 2024 (last updated January 17, 2024)
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table.
0
