Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
JFinalCMS File Content ContentModel.java findPage sql injection
Vulnerability Description
A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\main\java\com\cms\entity\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
JFinalCMS 注入漏洞
Vulnerability Description
JFinalCMS是heyewei个人开发者的一个内容管理系统。 JFinalCMS 1.0版本存在注入漏洞，该漏洞源于File Content Handler组件的srcmainjavacomcmsentityContentModel.java文件的name参数包含一个SQL注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A