NA

CVE-2022-37209

Published: 27/09/2022 Updated: 29/09/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

jflyfox jfinal cms 5.1.0

Github Repositories

CVE-2022-37209 POC

CVE-2022-37209 CVE-2022-37209 POC [Suggested description] JFinal CMS 510 is vulnerable to SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql5md [Vulnerab

CVE-2022-37210 POC

CVE-2022-37210 CVE-2022-37210 POC [Suggested description] JFinal CMS 510 is affected by: SQL Injection These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection [Additional Information] githubcom/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql9md [Vulnerabi