CVE-2020-22212

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...

CVE-2020-22212

CVE-2020-22212 affects 74CMS version 3.2.0, where a vulnerability in the id parameter of wap/wap-company-show.php allows SQL injection. The connected documents consistently describe a SQL injection vulnerability in 74CMS 3.2.0 via the id parameter, without detailing exploit vectors, impact scope,...

CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22211

CVE-2020-22211 describes an SQL injection in 74cms 3.2.0 exploitable via the key parameter to plus/ajax_street.php. The vulnerability arises from unsafely handling input in that parameter, enabling an attacker to execute arbitrary SQL queries on the database. Documented impact includes potential ...

CVE-2020-22210

Vulnerability (CVE-2020-22210) exists in 74cms 3.2.0, specifically in the server-side script ajax_officebuilding.php where the x parameter is vulnerable to SQL injection. The Nuclei template and related records describe this as a SQL injection flaw with the potential to execute arbitrary SQL, lea...

CVE-2020-22210

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

CVE-2020-22209

CVE-2020-22209 affects 74cms v3.2.0, with a SQL injection in plus/ajax_common.php. The vulnerability arises from unsafe handling of query parameters (CWE-89), enabling arbitrary SQL via the parameter and potentially leading to unauthorized data access or leakage and database compromise (as noted ...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22208

CVE-2020-22208 affects the 74cms platform (version 3.2.0) with a SQL Injection vulnerability via the x parameter of plus/ajax_street.php. The authenticated-free exploit allows arbitrary SQL statements, potentially leading to data leakage or database compromise. Multiple connected sources corrobor...

迅易科技 74cms SQL注入漏洞

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

VulnCheck KEV: CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

74cms 6.0.20 has a logic flaw vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to obtain sensitive information...

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

74CMS Remote Code Execution (CVE-2020-35339)

A remote code execution vulnerability exists in 74CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

Remote code execution

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...