KakeruJ/CVE

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-40322 ↗	Jul 16, 2024Tuesday, 16 July 2024, 16:15	8.8 HIGH	—
An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
CVE-2024-35570 ↗	May 23, 2024Thursday, 23 May 2024, 19:16	9.8 CRITICAL	—
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.