Skip to content
Sign in
5.3 Medium

CVE-2024-12351 A vulnerability classified as critical has been found in JFinalCMS 1.0

Description

A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\main\java\com\cms\entity\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely.

Affected products and versions

Product Affected versions Fixed in
JFinalCMS 1.0 No fix stated
jfinalcms 1.0 No fix stated

Other CVEs of JFinalCMS

The 8 CVEs of JFinalCMS →
CVE-2024-12350 A vulnerability was found in JFinalCMS 1.0 5.3 Medium CVE-2024-12349 A vulnerability was found in JFinalCMS 1.0 6.9 Medium CVE-2024-8782 A vulnerability was found in JFinalCMS up to 1.0 5.3 Medium CVE-2024-8706 A vulnerability was found in JFinalCMS up to 20240903 5.3 Medium
Track this CVE