CVE-2022-37201

JFinal CMS 5.1.0 is vulnerable to SQL Injection.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.59% chance of exploitation in the next 30 days, 75th percentile

Published

2022-09-15

Updated

2024-08-03

Proof-of-concept exploits (2)

• AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql4.md2★ · 2022-07-29
• AgainstTheLight/CVE-2022-372010★ · 2022-09-15

Security advisories

• AgainstTheLight/CVE-2022-37201/blob/main/README.md

References

• CVE Record
• NVD entry

Related

• CVE-2022-30929
• CVE-2022-37202
• CVE-2022-37203
• CVE-2022-37204
• CVE-2022-37205
• CVE-2022-37207