CVE-2022-37203

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-37203

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37203.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-37203

Published

2022-09-19T15:26:22Z

Modified

2026-07-15T01:48:50.031617938Z

Summary

[none]

Details

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/37xxx/CVE-2022-37203.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/jflyfox/jfinal_cms

Affected ranges

Type

GIT

Repo

https://github.com/jflyfox/jfinal_cms

Events

Introduced

f128a0d28bdaa80e6d38ff08c1b4fdc402eeed1e

Last affected

f128a0d28bdaa80e6d38ff08c1b4fdc402eeed1e

Database specific

{
    "cpe": "cpe:2.3:a:jflyfox:jfinal_cms:5.1.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*

5.1.0

v5.*

v5.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37203.json"