Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/48
Related Vulnerabilities
CVE-2021-23509 Vulnerability in npm package json-ptr
CVE-2010-2076 Vulnerability in maven package org.apache.cxf:cxf-common-utilities
CVE-2022-25645 Vulnerability in npm package dset
CVE-2022-24814 Vulnerability in npm package directus
CVE-2023-41887 Vulnerability in maven package org.openrefine:database