Remote code execution in JFinal CMS

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-30349 · ADVISORY
• jflyfox/jfinal_cms · WEB
• jflyfox/jflyfox_jfinal · PACKAGE

Lỗ hổng khác của com.jflyfox:jflyfox_jfinal

• CVE-2022-36527TRUNG BÌNH 5.4Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field un…
• CVE-2022-37223NGHIÊM TRỌNG 9.8JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
• CVE-2022-37199NGHIÊM TRỌNG 9.8JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
• CVE-2022-29648TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Fo…
• CVE-2022-30500NGHIÊM TRỌNG 9.8Jfinal cms 5.1.0 is vulnerable to SQL Injection.