Description

Jfinal cms 5.1.0 is vulnerable to SQL Injection.

Remediation

References

https://github.com/jflyfox/jfinal_cms/issues/35

Related Vulnerabilities

CVE-2022-2218 Vulnerability in npm package parse-url

CVE-2022-29648 Vulnerability in maven package com.jflyfox:jflyfox_jfinal

CVE-2021-21162 Vulnerability in maven package org.webjars.npm:electron

CVE-2017-3202 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer

CVE-2017-16132 Vulnerability in npm package simple-npm-registry

Severity

Critical

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Third Party Advisory