206 matches found
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
74CMS 5.0.1 - Cross-Site Request Forgery Add New Admin User Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE :...
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User) Exploit
Exploit for php platform in category web applications Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS...
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS v5.0.1 has a CSRF vulnerability to add...
Cross site request forgery (csrf)
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...
CVE-2019-11374
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...
CVE-2019-11374
CVE-2019-11374 affects 74CMS v5.0.1 and is a CSRF vulnerability that allows adding a new admin user via the URI index.php?m=Admin&c=admin&a=add. The Red Hat/ENISA/Exploit-DB entries corroborate the CSRF description and provide exploit samples; no official remediation details are included in the p...
CVE-2019-11374
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
Code injection
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
The CVE-2019-10684 entry affects 74cms v5.0.1, where Application/Admin/Controller/ConfigController.class.php exposes a remote PHP code execution flaw. The vulnerability is triggered via the index.php?m=Admin&c=config&a=edit site_domain parameter, enabling an attacker to run arbitrary PHP code on ...
SQL Injection Vulnerability in 74cms in***.php Page
Knight Talent System 74cms is a talent recruitment system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms in.php page, which can be exploited by attackers to obtain sensitive information...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
Code injection
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
CVE-2018-20519
The CVE-2018-20519 entry affects 74cms v4.2.111. A vulnerability allows remote authenticated users to read or modify arbitrary resumes by manipulating the job-search intent through the index.php?c=Personal&a=ajax_save_basic pid parameter, as described in multiple sources. This enables unauthorize...
74cms Cross-Site Scripting Vulnerability
74cms is a PHP and MySQL based online recruitment system of Taiyuan Xunyi Technology Co. A cross-site scripting vulnerability exists in the upload/index.php?c=resume&a=resumelist page in version 4.2.111 of 74cms, which can be exploited by a remote attacker with the help of the 'key' parameter to...