Submit #299736: JFinalcms JFinalcms v5.0.0 SQL injection
| Title | JFinalcms JFinalcms v5.0.0 SQL injection |
|---|---|
| Description | SQL injection exists for custom data tables,url is /admin/div_data/delete?divId=9 The function is located in, Extended Content - Custom Data |
| Source | ⚠️ https:/ |
| User | wyl321 (UID 66236) |
| Submission | 03/16/2024 15:41 (2 years ago) |
| Moderation | 03/17/2024 09:05 (17 hours later) |
| Status | Accepted |
| VulDB entry | 257071 [heyewei JFinalCMS 5.0.0 Custom Data Page delete?divId=9 sql injection] |
| Points | 16 |