← Database

CVE-2022-34928

HIGH CVSS: 8.8 Published: 2022-08-03 Modified: 2026-06-17

Description

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

Affected Platforms

Jflyfox Jfinal Cms

Weakness Type

CWE-89

References