CVE-2022-37209

creationtimestamp| type| source ---|---|--- 2022-09-28 02:36:19+00:00| seen| https://t.me/cibsecurity/50539...

CVE-2022-37209

CVE-2022-37209 affects JFinal CMS 5.1.0. The vulnerability is a SQL Injection caused by multiple interfaces not using the same component and lacking filters, with each interface using its own SQL concatenation method, enabling injection. CVSSv3.1 scores indicate high risk (8.8) with network attac...

CVE-2022-37209

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...