TI-2024-38015 CVE-2024-57665 · GHSA-75x9-5mr4-583v
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.
Priority HIGH 82
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.
heyewei
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
heyewei records in CISA KEVNo heyewei vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Jfinalcms · all components
TI-2024-02388 CVE-2024-2568 · GHSA-2wxc-99ff-4mwq
heyewei JFinalCMS Custom Data Page sql injection
Priority HIGH 65
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical.
TI-2024-08148 CVE-2024-8782 · GHSA-fwj7-298v-7488
JFinalCMS edit delete path traversal
Priority MEDIUM 57
A vulnerability was found in JFinalCMS up to 1.0.
TI-2024-08075 CVE-2024-8706 · GHSA-fmrw-pfr8-r4j7
JFinalCMS com.cms.util.TemplateUtils update path traversal
Priority MEDIUM 57
A vulnerability was found in JFinalCMS up to 20240903.
TI-2024-08064 CVE-2024-8694 · GHSA-mx92-jwq3-h28x
JFinalCMS com.cms.controller.admin.TemplateController update path traversal
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903.
TI-2024-04933 CVE-2024-5310
JFinalCMS content cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic has been found in JFinalCMS up to 20221020.
TI-2026-01849 CVE-2026-2200 · GHSA-xhf6-49gh-77cw
heyewei JFinalCMS API Endpoint save cross site scripting
Priority MEDIUM 55
A weakness has been identified in heyewei JFinalCMS 5.0.0.
TI-2024-04998 CVE-2024-5379
JFinalCMS template cross site scripting
Priority LOW 24
A vulnerability was found in JFinalCMS up to 20240111.