İçeriğe atla
Noroxi

jflyfox kayıtları

jflyfox üreticisine ait 51 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
5
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

51 kayıt
  • CVE-2021-42242
    40Planlayın

    A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.

    KritikCVSS 9,8İstismar yokEPSS %2

    jflyfox · jfinal cms5 May 2022

  • CVE-2022-37203
    39İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    jflyfox · jfinal cms19 Eyl 2022

  • CVE-2023-30349
    39İzleyin

    JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.

    KritikCVSS 9,8İstismar yokEPSS %2

    jflyfox · jfinal cms27 Nis 2023

  • CVE-2022-37204
    39İzleyin

    Final CMS 5.1.0 is vulnerable to SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    jflyfox · jfinal cms20 Eyl 2022

  • CVE-2023-47503
    39İzleyin

    An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in

    KritikCVSS 9,8İstismar yokEPSS %1

    jflyfox · jfinal cms27 Kas 2023

  • CVE-2022-30500
    39İzleyin

    Jfinal cms 5.1.0 is vulnerable to SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %1

    jflyfox · jfinal cms26 May 2022

  • CVE-2022-37199
    39İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

    KritikCVSS 9,8İstismar yokEPSS %1

    jflyfox · jfinal cms23 Ağu 2022

  • CVE-2022-37223
    39İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.

    KritikCVSS 9,8İstismar yokEPSS %1

    jflyfox · jfinal cms23 Ağu 2022

  • CVE-2024-53477
    39İzleyin

    JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java

    KritikCVSS 9,8İstismar yokEPSS %1

    jflyfox · jfinal cms2 Ara 2024

  • CVE-2020-19155
    37İzleyin

    Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary co

    YüksekCVSS 8,8İstismar yokEPSS %8

    jflyfox · jfinal cms15 Eyl 2021

  • CVE-2020-19151
    37İzleyin

    Command Injection in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code by uploading a malicious HTML template

    YüksekCVSS 8,8İstismar yokEPSS %5

    jflyfox · jfinal cms15 Eyl 2021

  • CVE-2022-37205
    35İzleyin

    JFinal CMS 5.1.0 is affected by: SQL Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    jflyfox · jfinal cms20 Eyl 2022

  • CVE-2022-37201
    35İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    jflyfox · jfinal cms15 Eyl 2022

  • CVE-2022-37207
    35İzleyin

    JFinal CMS 5.1.0 is affected by: SQL Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    jflyfox · jfinal cms15 Eyl 2022

  • CVE-2022-37209
    35İzleyin

    JFinal CMS 5.1.0 is affected by: SQL Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    jflyfox · jfinal cms27 Eyl 2022

  • CVE-2022-37208
    35İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    jflyfox · jfinal cms13 Eki 2022

  • CVE-2022-37202
    35İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    jflyfox · jfinal cms26 Eki 2022

  • CVE-2022-34928
    35İzleyin

    JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

    YüksekCVSS 8,8İstismar yokEPSS %1

    jflyfox · jfinal cms2 Ağu 2022

  • CVE-2020-19150
    33İzleyin

    Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information or cause a denial of servic

    YüksekCVSS 8,1İstismar yokEPSS %3

    jflyfox · jfinal cms15 Eyl 2021

  • CVE-2021-40639
    30İzleyin

    Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemana

    YüksekCVSS 7,5İstismar yokEPSS %1

    jflyfox · jfinal cms15 Eyl 2021

  • CVE-2021-37262
    30İzleyin

    JFinal_cms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service.

    YüksekCVSS 7,5İstismar yokEPSS %1

    jflyfox · jfinal cms16 Ara 2021

  • CVE-2023-34645
    30İzleyin

    jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %1

    jflyfox · jfinal cms16 Haz 2023

  • CVE-2022-38275
    28İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.

    YüksekCVSS 7,2İstismar yokEPSS %1

    jflyfox · jfinal cms9 Eyl 2022

  • CVE-2022-38278
    28İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

    YüksekCVSS 7,2İstismar yokEPSS %1

    jflyfox · jfinal cms9 Eyl 2022

  • CVE-2022-38273
    28İzleyin

    JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

    YüksekCVSS 7,2İstismar yokEPSS %1

    jflyfox · jfinal cms9 Eyl 2022