8.8
CVSSv3

CVE-2022-37208

Published: 13/10/2022 Updated: 13/10/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jflyfox jfinal cms 5.1.0

Github Repositories

CVE-2022-37208

37208 CVE-2022-37208 [Suggested description] JFinal CMS 510 is vulnerable to SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql5md [Vulnerability Type] S

CVE-2022-37209 POC

CVE-2022-37209 CVE-2022-37209 POC [Suggested description] JFinal CMS 510 is vulnerable to SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql5md [Vulnerab