Jflyfox · weakness class
SQL Injection
30 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resultin…
- JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…
- JFinal CMS 5.1.0 is vulnerable to SQL Injection.
- JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…
- JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting…
- JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resultin…
- Final CMS 5.1.0 is vulnerable to SQL Injection.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.
- Jfinal cms 5.1.0 is vulnerable to SQL Injection.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.
- JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.
- Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinal_cms/system/dict/list.
- Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.