CVE-2022-37201

JFinal CMS 5.1.0 is vulnerable to SQL Injection.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.25% chance of exploitation in the next 30 days, 67th percentile

Published

2022-09-15

Updated

2024-08-03

Proof-of-concept exploits (2)

• AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql4.md
• AgainstTheLight/CVE-2022-372010★ · 2022-09-15

References

• CVE Record
• NVD entry

Related

• CVE-2022-30929
• CVE-2022-37202
• CVE-2022-37203
• CVE-2022-37204
• CVE-2022-37205
• CVE-2022-37207