CVE-2022-37203 | BDVDB-2026-184913 Detail

Description#

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql3.md
https://github.com/AgainstTheLight/CVE-2022-37203/blob/main/README.md

Exploit#

No public exploit known

History#

Version 12022-09-19Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.