8.8
CVSSv3

CVE-2022-37205

Published: 20/09/2022 Updated: 22/09/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jflyfox jfinal cms 5.1.0

Github Repositories

CVE-2022-37205 POC

CVE-2022-37205 CVE-2022-37205 POC [Suggested description] ** RESERVED **JFinal CMS 510 is affected by: SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql8