CVE-2024-24029

Description

References

• gitee.com/heyewei/JFinalcms/issues/I8VE52 · Exploit

jfinalcms 的其他漏洞

• CVE-2024-40322高危 8.8An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
• CVE-2023-51254中危 6.1Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the frien…
• CVE-2024-24375高危 7.5SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.
• CVE-2024-22497中危 6.1Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via cr…
• CVE-2024-22496中危 6.1Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.