Approved changes feed: RSS · Atom

cpe:2.3:a:jfinalcms_project:jfinalcms:5.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0 update: *

VendorJfinalcms Project (02bd1d09-e84b-59cb-bec4-d45dcbf41993)
ProductJfinalcms (14e2b63a-e7c7-5f84-9eb8-b26660e65451)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-40322 vulnerable 2026-06-08 06:43:52.174949 Details available
An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
Published: 2024-07-16T00:00:00.000Z
Updated: 2024-08-02T04:33:11.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2568 vulnerable 2026-06-08 06:33:31.583197 heyewei JFinalCMS Custom Data Page sql injection
MEDIUM (4.7)
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/div_data/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257071.
Published: 2024-03-17T23:00:07.874Z
Updated: 2024-08-02T18:31:33.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24375 vulnerable 2026-06-08 06:29:41.270568 Details available
SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.
Published: 2024-03-07T00:00:00.000Z
Updated: 2024-08-29T16:53:35.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24029 vulnerable 2026-06-08 06:29:41.074368 Details available
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
Published: 2024-02-02T00:00:00.000Z
Updated: 2025-06-12T14:54:08.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22497 vulnerable 2026-06-08 06:29:35.855488 Details available
Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.
Published: 2024-01-23T00:00:00.000Z
Updated: 2025-05-30T14:21:05.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22496 vulnerable 2026-06-08 06:29:35.854816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22494 vulnerable 2026-06-08 06:29:35.854379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22493 vulnerable 2026-06-08 06:29:35.853902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22492 vulnerable 2026-06-08 06:29:35.853131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51254 vulnerable 2026-06-08 06:16:17.299038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50449 vulnerable 2026-06-08 06:16:16.202831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50137 vulnerable 2026-06-08 06:16:15.590325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50136 vulnerable 2026-06-08 06:16:15.589988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50102 vulnerable 2026-06-08 06:16:15.567209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50101 vulnerable 2026-06-08 06:16:15.566727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50100 vulnerable 2026-06-08 06:16:15.565474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49487 vulnerable 2026-06-08 06:14:29.124961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49486 vulnerable 2026-06-08 06:14:29.124610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49485 vulnerable 2026-06-08 06:14:29.124272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49448 vulnerable 2026-06-08 06:14:29.108653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49447 vulnerable 2026-06-08 06:14:29.108175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49446 vulnerable 2026-06-08 06:14:29.107926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49398 vulnerable 2026-06-08 06:14:29.073511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49397 vulnerable 2026-06-08 06:14:29.073084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49396 vulnerable 2026-06-08 06:14:29.070085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49395 vulnerable 2026-06-08 06:14:29.069635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49383 vulnerable 2026-06-08 06:14:29.064875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49382 vulnerable 2026-06-08 06:14:29.064474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49381 vulnerable 2026-06-08 06:14:29.064133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49380 vulnerable 2026-06-08 06:14:29.063923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49379 vulnerable 2026-06-08 06:14:29.063710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49378 vulnerable 2026-06-08 06:14:29.063383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49377 vulnerable 2026-06-08 06:14:29.062928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49376 vulnerable 2026-06-08 06:14:29.062673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49375 vulnerable 2026-06-08 06:14:29.062213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49374 vulnerable 2026-06-08 06:14:29.061941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49373 vulnerable 2026-06-08 06:14:29.061481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41599 vulnerable 2026-06-08 06:11:06.225440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.