206 matches found
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal=ajaxsavebasic pid parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin=config=edit sitedomain parameter...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume=resumelist has XSS via the key parameter...
CVE-2019-17612
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin=Ad=category sort parameter...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329 74CMS index path traversal
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329 74CMS index path traversal
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
CVE-2025-4329 affects 74CMS up to v3.33.0. The vulnerability is in the function index of /index.php/index/download/index, where manipulating the url parameter enables path traversal. It can be exploited remotely and the exploit has been disclosed publicly. Mitigation guidance from PT-Security sug...
74cms 安全漏洞
74cms is an online recruitment system based on PHP and MySQL by 74cms. A security vulnerability exists in 74cms 3.33.0 and earlier versions, which stems from improper manipulation of the parameter url in the file /index.php/index/download/index, which could lead to path traversal attacks...
PT-2025-19925 · 74Cms · 74Cms
Name of the Vulnerable Software and Affected Versions: 74CMS versions up to 3.33.0 Description: A vulnerability was found in the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The explo...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
CVE-2024-46089 affects 74cms