Products: 1
    Vulnerabilities: 52
    Known Exploited: 0
    9
    Critical Level Threats
    30
    High Level Threats
    13
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-11473

    jflyfox jfinal_cms AdvicefeedbackController.java list sql injection

    Last Modified: Jun 08, 2026
    Published: Jun 08, 2026

    CVE-2025-6105

    jflyfox jfinal_cms HOME.java cross-site request forgery

    Last Modified: Nov 25, 2025
    Published: Jun 16, 2025

    CVE-2024-53477

    JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java

    Last Modified: Nov 25, 2025
    Published: Dec 02, 2024

    CVE-2023-47503

    An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module.

    Last Modified: Nov 21, 2024
    Published: Nov 28, 2023

    CVE-2023-34645

    jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

    Last Modified: Dec 17, 2024
    Published: Jun 16, 2023
    Items Per Page
    Jflyfox Vulnerabilities & Security CVEs | CVE-DB