← Database

CVE-2022-37199

CRITICAL CVSS: 9.8 Published: 2022-08-23 Modified: 2026-06-17

Description

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.

Affected Platforms

Jflyfox Jfinal Cms

Weakness Type

CWE-89

References