WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor jfinalcms project✕
Overview 22 matches · 20 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
22matches 20in Waratek scope90.9% 1protected4.5% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 4.5% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 19 86.4% Outside Waratek scope 0 0.0% Not applicable 2 9.1% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 22 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 4.5% partly blocked 0 0.0% not blocked 21 95.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 2 9.1% Forecast only 0 0.0% No public exploit 20 90.9%
split by peak 20 / month
Not applicable: 2No exploit published: 19Protected by Waratek: 1 High: 22 not blocked: 21blocked by ARMR today: 1 No public exploit: 20Proof of concept only: 2
Dec 2320 Protected by Waratek1 No exploit published19 High20 blocked by ARMR today1 not blocked19 No public exploit20 Jan 240 Feb 240 Mar 241 Not applicable1 High1 not blocked1 Proof of concept only1 Apr 240 May 240 Jun 240 Jul 241 Not applicable1 High1 not blocked1 Proof of concept only1
Dec 23Jan 24Feb 24Mar 24Apr 24May 24Jun 24Jul 24
22 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-40322 High 2024-07-16 Not applicable Proof of concept only An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data
CVE-2024-24375 High 2024-03-07 Not applicable Proof of concept only SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.
CVE-2023-50449 High 2023-12-10 Protected by Waratek No public exploit JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.
CVE-2023-49448 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.
CVE-2023-49447 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.
CVE-2023-49446 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.
CVE-2023-49398 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.
CVE-2023-49397 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
CVE-2023-49396 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.
CVE-2023-49395 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.
CVE-2023-49383 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.
CVE-2023-49382 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.
CVE-2023-49381 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.
CVE-2023-49380 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.
CVE-2023-49379 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save.
CVE-2023-49378 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.
CVE-2023-49377 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.
CVE-2023-49376 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete.
CVE-2023-49375 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update.
CVE-2023-49374 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update.
CVE-2023-49373 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete.
CVE-2023-49372 High 2023-12-05 No exploit published No public exploit JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save.