CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22212

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...

CVE-2020-22211

CVE-2020-22211 describes an SQL injection in 74cms 3.2.0 exploitable via the key parameter to plus/ajax_street.php. The vulnerability arises from unsafely handling input in that parameter, enabling an attacker to execute arbitrary SQL queries on the database. Documented impact includes potential ...

CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22210

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22208

CVE-2020-22208 affects the 74cms platform (version 3.2.0) with a SQL Injection vulnerability via the x parameter of plus/ajax_street.php. The authenticated-free exploit allows arbitrary SQL statements, potentially leading to data leakage or database compromise. Multiple connected sources corrobor...

迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

PT-2021-12276 · Ibm · Ibm Financial Transaction Manager

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager versions 3.2.0 through 3.2.8 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within ...

aa-structuretimers (=1.2.2), admin-tool-button (>=1.0.1a0 <=1.0.5a0) +1094 more potentially affected by CVE-2021-33203 via django (>=3.2.0 <=3.2.3)

django PYPI version =3.2.0, =1.0.1a0, =1.4.2, =5.10.1, =2022.9.19, =2.0.0, =0.0.1, =1.0.0, =1.0.6, =3.2.17.0, =1.0.0a4.dev0, =2023.1.0.dev0 and more Source cves: CVE-2021-33203 Source advisory: OSV:PYSEC-2021-98...

GHSA-2X6R-7427-95CM Deserialization of Untrusted Data in Apache Camel RabbitMQ

Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0...

WordPress CM Registration Pro premium plugin <= 3.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by WPScan Team in WordPress CM Registration Pro premium plugin versions = 3.2.0. Solution Update the WordPress CM Registration Pro premium plugin to the latest available version at least 3.2.1...

GHSA-QR4M-JCVC-3382 Prototype Pollution in dot-notes

All versions of package dot-notes up to and including version 3.2.0 are vulnerable to Prototype Pollution via the create function...

Prototype Pollution in dot-notes

All versions of package dot-notes up to and including version 3.2.0 are vulnerable to Prototype Pollution via the create function...

Design/Logic Flaw

Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...