Known Vulnerabilities for products from Jflyfox
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Jflyfox".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-47503 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2023-11-28 | 2023-12-01 |
| CVE-2023-34645 json | jfinal CMS 5.1.0 has an arbitrary file read vulnerability. | 7.5 - HIGH | 2023-06-16 | 2023-06-22 |
| CVE-2023-30349 json | JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function. | 9.8 - CRITICAL | 2023-04-27 | 2023-05-08 |
| CVE-2023-24747 json | Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list. | 5.4 - MEDIUM | 2023-04-05 | 2023-04-12 |
| CVE-2023-22975 json | jfinal_cms 5.1.0 is vulnerable to Cross Site Scripting (XSS). | 6.1 - MEDIUM | 2023-02-03 | 2024-03-08 |
| CVE-2022-38286 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38285 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38284 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38283 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38282 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38281 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38280 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38279 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38278 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38277 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38276 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38275 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38274 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38273 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |
| CVE-2022-38272 json | JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. | 7.2 - HIGH | 2022-09-09 | 2022-09-13 |