jfinaloa project kayıtları

jfinaloa project üreticisine ait 11 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

11 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2023-0758İstismar yok	glorylion JFinalOA SysOrg.java sql injectionjfinaloa project · jfinaloa · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,6	9 Şub 2023
39İzleyin	CVE-2024-57768İstismar yok	JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.jfinaloa project · jfinaloa · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,5	16 Oca 2025
35İzleyin	CVE-2024-57775İstismar yok	JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.jfinaloa project · jfinaloa · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	16 Oca 2025
35İzleyin	CVE-2024-57769İstismar yok	JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser.jfinaloa project · jfinaloa · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	16 Oca 2025
35İzleyin	CVE-2024-57770İstismar yok	JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id.jfinaloa project · jfinaloa · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	16 Oca 2025
26İzleyin	CVE-2021-40645İstismar yok	An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the Flojfinaloa project · jfinaloa · CWE-89 SQL enjeksiyonu	Orta6,5	—	%1,0	30 Mar 2022
19İzleyin	CVE-2024-57771İstismar yok	A cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execujfinaloa project · jfinaloa · CWE-79 RCE XSS	Orta4,8	—	%0,3	16 Oca 2025
19İzleyin	CVE-2024-57773İstismar yok	A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to jfinaloa project · jfinaloa · CWE-79 RCE XSS	Orta4,8	—	%0,2	16 Oca 2025
19İzleyin	CVE-2024-57774İstismar yok	A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers jfinaloa project · jfinaloa · CWE-79 RCE XSS	Orta4,8	—	%0,2	16 Oca 2025
19İzleyin	CVE-2024-57772İstismar yok	A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to jfinaloa project · jfinaloa · CWE-79 RCE XSS	Orta4,8	—	%0,2	16 Oca 2025
18İzleyin	CVE-2024-57776İstismar yok	A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execujfinaloa project · jfinaloa · CWE-79 RCE XSS	Orta4,6	—	%0,2	16 Oca 2025

CVE-2023-0758
39İzleyin
glorylion JFinalOA SysOrg.java sql injection
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
jfinaloa project · jfinaloa9 Şub 2023
CVE-2024-57768
39İzleyin
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57775
35İzleyin
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57769
35İzleyin
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57770
35İzleyin
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id.
YüksekCVSS 8,8İstismar yokEPSS %0
- SQL enjeksiyonu
jfinaloa project · jfinaloa16 Oca 2025
CVE-2021-40645
26İzleyin
An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the Flo
OrtaCVSS 6,5İstismar yokEPSS %1
- SQL enjeksiyonu
jfinaloa project · jfinaloa30 Mar 2022
CVE-2024-57771
19İzleyin
A cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execu
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57773
19İzleyin
A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57774
19İzleyin
A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57772
19İzleyin
A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to
OrtaCVSS 4,8İstismar yokEPSS %0
- RCE
- XSS
jfinaloa project · jfinaloa16 Oca 2025
CVE-2024-57776
18İzleyin
A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execu
OrtaCVSS 4,6İstismar yokEPSS %0
- RCE
- XSS
jfinaloa project · jfinaloa16 Oca 2025