Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-37208. PoCs published by AgainstTheLight.
AI-analyzed exploit summary This repository provides a detailed technical description of CVE-2022-37208, an SQL injection vulnerability in JFinal CMS 5.1.0. It explains the root cause, affected components, and references external technical analysis but does not include functional exploit code.
Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
Exploits (1)
This repository provides a detailed technical description of CVE-2022-37208, an SQL injection vulnerability in JFinal CMS 5.1.0. It explains the root cause, affected components, and references external technical analysis but does not include functional exploit code.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H