CVE-2020-35339

CVE-2020-35339 affects 74CMS version 5.0.1. A remote code execution vulnerability exists in the files /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php, allowing an attacker to obtain server permissions and control the server. The issue is documented with...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

Remote code execution

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

74CMS prior to 6.0.48 is affected by PHP remote file inclusion via the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php, enabling remote code execution. The CVE-2020-29279 entry points to this vulnerability with a high/severe impact. Affected component/file: 74CM...

74CMS 安全漏洞

Knight CMS 74cms is a free website management system based on PHP+MYSQL, providing perfect talent recruitment website construction program. There is a PHP remote file inclusion vulnerability in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in versions prior ...

XSS vulnerability in 74cms of Taiyuan Xunyi Technology Co.

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerability

74cms Knight cms talent system is a free open source professional recruitment system based on PHP + MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain database sensitive information...

Unauthorized Access Vulnerability in 74cms

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information on the website...

74cms has a logic flaw vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms has a logic flaw vulnerability that can be exploited by attackers to change user passwords...

74cms 4.2.26 SQL Injection Vulnerability in Frontend Co***.php Page

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Co.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

CVE-2019-17612

An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...

Sql injection

An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...

CVE-2019-17612

An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...

CVE-2019-17612

CVE-2019-17612 affects 74CMS v5.2.8. The vulnerability is a SQL Injection caused by the _list method in Common/Controller/BackendController.class.php when processing the index.php?m=Admin&c=Ad&a=category sort parameter. According to the CVSS3.1 metrics, base score 7.2 (HIGH) with network attack v...

74cms backend Hr***.cl***.ph page has arbitrary file download vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Hr.cl.ph page there are arbitrary file download vulnerability. Attacker...

Arbitrary file download vulnerability in 74cms backend fi***_man***_js**.php page

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background fimanjs.php page there are arbitrary file download vulnerability...

74CMS 5.0.1 Cross Site Request Forgery

Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS v5.0.1 has a CSRF vulnerability to add...