Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/49
Related Vulnerabilities
CVE-2021-39171 Vulnerability in npm package passport-saml
CVE-2020-26870 Vulnerability in maven package org.webjars.bowergithub.cure53:dompurify
CVE-2022-29229 Vulnerability in npm package cassproject
CVE-2019-15603 Vulnerability in npm package seeftl
CVE-2023-36665 Vulnerability in maven package org.webjars.npm:github-com-protobufjs-protobuf-js