CVE-2023-50136

概要

参考情報

• yukino-hiki/CVE · Exploit

jfinalcms のその他の脆弱性

• CVE-2024-40322高 8.8An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
• CVE-2023-51254中 6.1Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the frien…
• CVE-2024-24375高 7.5SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.
• CVE-2024-24029緊急 9.8JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
• CVE-2024-22497中 6.1Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via cr…