CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/listapprove...

CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via the endpoint /admin/article/list_approve . The connected documents confirm this vulnerability but do not provide explicit exploit details or a fixed version. Remediation recommended: upgrade to a newer JFinal CMS version that contains a fix; no ...