Vulnerabilities > Jfinalcms Project > Jfinalcms

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-49377 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49378 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49379 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49380 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49381 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49382 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49383 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49395 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49396 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49397 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
network
low complexity
jfinalcms-project CWE-352
8.8