Skip to content

Jflyfox · weakness class

SQL Injection

30 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resultin…CVE-2022-37203Jflyfox · 1.7% likely

    CWE-89

  2. JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…CVE-2022-37207Jflyfox · 1.6% likely

    CWE-89

  3. JFinal CMS 5.1.0 is vulnerable to SQL Injection.CVE-2022-37201Jflyfox · 1.6% likely

    CWE-89

  4. JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…CVE-2022-37205Jflyfox · CVSS 8.8 · 1.6% likely

    CWE-89

  5. JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…CVE-2022-37209Jflyfox · CVSS 8.8 · 1.6% likely

    CWE-89

  6. JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resultin…CVE-2022-37208Jflyfox · CVSS 8.8 · 1.5% likely

    CWE-89

  7. Final CMS 5.1.0 is vulnerable to SQL Injection.CVE-2022-37204Jflyfox · CVSS 9.8 · 1.5% likely

    CWE-89

  8. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/listCVE-2022-37202Jflyfox · CVSS 8.8 · 1.4% likely

    CWE-89

  9. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.CVE-2022-38278Jflyfox · 1.2% likely

    CWE-89

  10. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.CVE-2022-38275Jflyfox · 1.2% likely

    CWE-89

  11. Jfinal cms 5.1.0 is vulnerable to SQL Injection.CVE-2022-30500Jflyfox · 1.1% likely

    CWE-89

  12. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.CVE-2022-38286Jflyfox · 1.1% likely

    CWE-89

  13. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.CVE-2022-38285Jflyfox · 1.1% likely

    CWE-89

  14. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.CVE-2022-38284Jflyfox · 1.1% likely

    CWE-89

  15. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.CVE-2022-38283Jflyfox · 1.1% likely

    CWE-89

  16. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.CVE-2022-38282Jflyfox · 1.1% likely

    CWE-89

  17. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.CVE-2022-38281Jflyfox · 1.1% likely

    CWE-89

  18. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.CVE-2022-38280Jflyfox · 1.1% likely

    CWE-89

  19. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.CVE-2022-38279Jflyfox · 1.1% likely

    CWE-89

  20. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.CVE-2022-38277Jflyfox · 1.1% likely

    CWE-89

  21. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.CVE-2022-38276Jflyfox · 1.1% likely

    CWE-89

  22. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.CVE-2022-38274Jflyfox · 1.1% likely

    CWE-89

  23. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.CVE-2022-38273Jflyfox · 1.1% likely

    CWE-89

  24. JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.CVE-2022-38272Jflyfox · 1.1% likely

    CWE-89

  25. Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal_cms/system/dict/list.CVE-2022-33114Jflyfox · 1.0% likely

    CWE-89

  26. Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.CVE-2022-28505Jflyfox · 1.0% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.