Soumettre #299736: JFinalcms JFinalcms v5.0.0 SQL injection
| Titre | JFinalcms JFinalcms v5.0.0 SQL injection |
|---|---|
| Description | SQL injection exists for custom data tables,url is /admin/div_data/delete?divId=9 The function is located in, Extended Content - Custom Data |
| La source | ⚠️ https:/ |
| Utilisateur | wyl321 (UID 66236) |
| Soumission | 16/03/2024 15:41 (il y a 3 ans) |
| Modérer | 17/03/2024 09:05 (17 hours later) |
| Statut | Accepté |
| Entrée VulDB | 257071 [heyewei JFinalCMS 5.0.0 Custom Data Page delete?divId=9 injection SQL] |
| Points | 16 |