CVE-2022-38280 - JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list

HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list

Published Sep 9, 2022

7.2

HIGH

CVSS 3.1

EPSS 1.05%

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40872		Advisory
https://github.com/jflyfox/jfinal_cms/issues/51		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 9, 2022

Updated Aug 3, 2024

Reserved Aug 15, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Sep 9, 2022

Updated Aug 3, 2024

GitHub

No data