Search results

Multiple SQL Injection Vulnerabilities in JFinal CMS - Unfiltered orderBy Parameter

Status: Open.

#62 In jflyfox/jfinal_cms;

· jqmxjj opened on Jan 26, 2026

xml file upload to XSS vulnerability in jfinal_cms V5.1.0

Status: Open.

#61 In jflyfox/jfinal_cms;

· iamyourfath opened on Sep 18, 2025

jfinal CMS v5.1.0 has an unauthorization command execution vulnerability

Status: Open.

#60 In jflyfox/jfinal_cms;

· kaoniniang2 opened on Nov 7, 2024

Jfinal_ CMS V5.1.0 has login.jsp written to RCE

Status: Open.

#58 In jflyfox/jfinal_cms;

· ZccAcc opened on Aug 18, 2023

jfinal CMS v5.1.0 has a arbitrary file reading vulnerability exists

Status: Open.

#57 In jflyfox/jfinal_cms;

· nightcloudos opened on May 26, 2023

jfinal CMS v5.1.0 has a command execution vulnerability exists

Status: Open.

#54 In jflyfox/jfinal_cms;

· baimao-box opened on Feb 10, 2023

XSS vulnerability exists in jfinal_cms V5.1.0

Status: Open.

#53 In jflyfox/jfinal_cms;

· superleeh opened on Dec 29, 2022

Some SQL injection vulnerabilities exists in JFinal CMS 5.1.0

Status: Open.

#52 In jflyfox/jfinal_cms;

· So4ms opened on Aug 9, 2022

Some SQL injection vulnerabilities exists in JFinal CMS 5.1.0

Status: Open.

#51 In jflyfox/jfinal_cms;

· So4ms opened on Aug 9, 2022

jfinal_ CMS 5.1.0 has a SQL injection

Status: Open.

#50 In jflyfox/jfinal_cms;

· AgainstTheLight opened on Jul 29, 2022

There is a SQL injection vulnerability exists in JFinal CMS 5.1.0 again

Status: Open.

#49 In jflyfox/jfinal_cms;

· jwt-123 opened on Jul 28, 2022

There is a SQL injection vulnerability exists in JFinal CMS 5.1.0

Status: Open.

#48 In jflyfox/jfinal_cms;

· jwt-123 opened on Jul 28, 2022