There is a SQL injection vulnerability exists in JFinal CMS 5.1.0 again #49
Description
you can use the route /jfinal_cms/system/role/list
then use sqlmap attack the interface
like this :
{{ message }}
you can use the route /jfinal_cms/system/role/list
then use sqlmap attack the interface
like this :