← All advisories

High severity8.8NVD Advisory· Published Oct 26, 2022· Updated Jun 17, 2026

CVE-2022-37202

CVE-2022-37202

Description

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jflyfox/Jfinal CMS
cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*
JFinal/CMSdescription
Jfinal/Jfinalllm-fuzzy
Range: =5.1.0

Patches

Vulnerability mechanics

References

2

github.com/AgainstTheLight/CVE-2022-37202/blob/main/README.mdnvdExploitThird Party Advisory
github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql1.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.