Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-37207. PoCs published by AgainstTheLight.
AI-analyzed exploit summary The repository provides a detailed technical description of CVE-2022-37207, an SQL injection vulnerability in JFinal CMS 5.1.0. It explains the root cause as improper SQL concatenation methods in multiple interfaces without proper filtering.
Description
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection
Exploits (1)
The repository provides a detailed technical description of CVE-2022-37207, an SQL injection vulnerability in JFinal CMS 5.1.0. It explains the root cause as improper SQL concatenation methods in multiple interfaces without proper filtering.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H