Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/48
Related Vulnerabilities
CVE-2020-11007 Vulnerability in maven package com.shopizer:sm-core-model
CVE-2020-19698 Vulnerability in maven package org.webjars.npm:editor.md
CVE-2022-24728 Vulnerability in npm package ckeditor4
CVE-2023-29215 Vulnerability in maven package org.apache.linkis:linkis-engineplugin-jdbc
CVE-2022-22881 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base