Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/49
Related Vulnerabilities
CVE-2023-27562 Vulnerability in npm package n8n
CVE-2017-5941 Vulnerability in npm package node-serialize
CVE-2021-32691 Vulnerability in npm package data-connector-rock
CVE-2020-14359 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2021-3794 Vulnerability in npm package @vuelidate/validators