Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-37209. PoCs published by AgainstTheLight.
AI-analyzed exploit summary This repository provides a technical description of CVE-2022-37209, an SQL injection vulnerability in JFinal CMS 5.1.0. It references external documentation for detailed exploit steps but does not include functional exploit code.
Description
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.
Exploits (1)
This repository provides a technical description of CVE-2022-37209, an SQL injection vulnerability in JFinal CMS 5.1.0. It references external documentation for detailed exploit steps but does not include functional exploit code.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H