Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/49
Related Vulnerabilities
CVE-2020-8127 Vulnerability in maven package org.webjars.npm:reveal.js
CVE-2021-21353 Vulnerability in maven package org.webjars.npm:pug-code-gen
CVE-2021-32621 Vulnerability in maven package org.xwiki.platform:xwiki-platform-dashboard-macro
CVE-2020-5497 Vulnerability in maven package org.mitre:openid-connect-common
CVE-2022-35278 Vulnerability in maven package org.apache.activemq:artemis-web