8.8
CVSSv3

CVE-2022-37207

Published: 15/09/2022 Updated: 18/09/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jflyfox jfinal cms 5.1.0

Github Repositories

CVE-2022-37207 POC

CVE-2022-37207 CVE-2022-37207 POC [Suggested description] JFinal CMS 510 is affected by: SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql10md [Vulnerabi