Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jflyfox:jflyfox_jfinal | <= 5.1.0 | — | GHSA-5rf4-f24c-hpvh |
Critical · 9.8
CVE-2022-37199
EUVD-2022-6488GHSA-5rf4-f24c-hpvh
SQL injection in jflyfox jfinal
Published Aug 23, 2022 · Updated Aug 3, 2024 · Assigned by mitre