CVE-2022-34928

JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.

• CWE-89

• https://github.com/jflyfox/jfinal_cms/issues/43Exploit, Issue Tracking, Third Party Advisory
• https://github.com/jflyfox/jfinal_cms/issues/43Exploit, Issue Tracking, Third Party Advisory

Published

Aug 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34917A security vulnerability has been identified in Apache Kafka…7.5
• CVE-2022-34918An issue was discovered in the Linux kernel through 5.18.9. …7.8
• CVE-2022-34919The file upload wizard in Zengenti Contensis Classic before …9.8
• CVE-2022-3492A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2022-34924Lanling OA Landray Office Automation (OA) internal patch num…7.5
• CVE-2022-34927MilkyTracker v1.03.00 was discovered to contain a stack over…7.8
• CVE-2022-3493A vulnerability, which was classified as problematic, has be…5.4
• CVE-2022-34937Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Req…8.8
• CVE-2022-3494The Complianz WordPress plugin before 6.3.4, and Complianz P…8.8
• CVE-2022-34943Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-34945Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2022-34946Pharmacy Management System v1.0 was discovered to contain a …9.8