CVE-2022-37202

HIGH 8.8EPSS 1.1%

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.11% chance of exploitation in the next 30 days, 64th percentile
Published: 2022-10-26
Updated: 2025-05-07

Proof-of-concept exploits (2)

AgainstTheLight/CVE-2022-372020★ · 2022-09-15
AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql1.md

References

Related