Unrated severityNVD Advisory· Published Sep 27, 2022· Updated May 22, 2025

CVE-2022-37209

Description

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jfinal/Jfinalcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =5.1.0

Patches

Vulnerability mechanics

References

github.com/AgainstTheLight/CVE-2022-37209/tree/mainmitrex_refsource_MISC
github.com/AgainstTheLight/someEXP_of_jfinal_cms/blob/main/jfinal_cms/sql9.mdmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000