AgainstTheLight/CVE-2022-37208

AgainstTheLight/CVE-2022-37208

GitHubGitHub
GitHubgithub.com
Releases0
CVE-2022-37208
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-37208↗
8.8 HIGH—

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.