İçeriğe atla
Noroxi

jfinalcms project kayıtları

jfinalcms project üreticisine ait 39 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

39 kayıt
  • CVE-2022-27341
    39İzleyin

    JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function.

    KritikCVSS 9,8İstismar yokEPSS %1

    jfinalcms project · jfinalcms22 Nis 2022

  • CVE-2024-24029
    39İzleyin

    JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.

    KritikCVSS 9,8İstismar yokEPSS %1

    jfinalcms project · jfinalcms2 Şub 2024

  • CVE-2024-40322
    35İzleyin

    An issue was discovered in JFinalCMS v.5.0.0.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms16 Tem 2024

  • CVE-2023-49379
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49374
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49375
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49376
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49377
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49378
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49380
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49381
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49382
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49383
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49395
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49396
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49397
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49398
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49446
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49447
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49448
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49373
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-49372
    35İzleyin

    JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.

    YüksekCVSS 8,8İstismar yokEPSS %0

    jfinalcms project · jfinalcms5 Ara 2023

  • CVE-2023-50449
    30İzleyin

    JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.

    YüksekCVSS 7,5İstismar yokEPSS %1

    jfinalcms project · jfinalcms10 Ara 2023

  • CVE-2024-24375
    30İzleyin

    SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.

    YüksekCVSS 7,5İstismar yokEPSS %0

    jfinalcms project · jfinalcms6 Mar 2024

  • CVE-2023-41599
    25İzleyin

    An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

    OrtaCVSS 5,3Kavram kanıtıEPSS %12

    jfinalcms project · jfinalcms18 Eyl 2023