AgainstTheLight/CVE-2022-37203

AgainstTheLight/CVE-2022-37203

GitHubGitHub
GitHubgithub.com
Releases0
CVE-2022-37203 POC
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-37203↗
9.8 CRITICAL—

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.