Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-37203. PoCs published by AgainstTheLight.
AI-analyzed exploit summary This repository provides a technical writeup for CVE-2022-37203, detailing a SQL injection vulnerability in JFinal CMS 5.1.0. It references external documentation and outlines the impact, including code execution, privilege escalation, and information disclosure.
Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
Exploits (1)
This repository provides a technical writeup for CVE-2022-37203, detailing a SQL injection vulnerability in JFinal CMS 5.1.0. It references external documentation and outlines the impact, including code execution, privilege escalation, and information disclosure.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H