# Jflyfox Jfinal Cms


- [CVE-2024-53477](https://insights.sbomify.com/CVE-2024-53477/): Deserialization in n/a (critical 9.8)
- [CVE-2023-47503](https://insights.sbomify.com/CVE-2023-47503/): Code injection in n/a (critical 9.8)
- [CVE-2023-30349](https://insights.sbomify.com/CVE-2023-30349/): Remote code execution in JFinal CMS (critical 9.8)
- [CVE-2022-37204](https://insights.sbomify.com/CVE-2022-37204/): SQL injection in n/a (critical 9.8)
- [CVE-2022-37203](https://insights.sbomify.com/CVE-2022-37203/): SQL injection in n/a (critical 9.8)
- [CVE-2022-37199](https://insights.sbomify.com/CVE-2022-37199/): SQL injection in jflyfox jfinal (critical 9.8)
- [CVE-2022-37223](https://insights.sbomify.com/CVE-2022-37223/): SQL injection in jflyfox jfinal (critical 9.8)
- [CVE-2022-30500](https://insights.sbomify.com/CVE-2022-30500/): SQL injection in jflyfox jfinal (critical 9.8)
- [CVE-2021-42242](https://insights.sbomify.com/CVE-2021-42242/): Command injection in n/a (critical 9.8)
- [CVE-2022-37202](https://insights.sbomify.com/CVE-2022-37202/): SQL injection in n/a (high 8.8)
- [CVE-2022-37208](https://insights.sbomify.com/CVE-2022-37208/): SQL injection in n/a (high 8.8)
- [CVE-2022-37209](https://insights.sbomify.com/CVE-2022-37209/): SQL injection in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/jflyfox/jfinal-cms/