20 matches found
CVE-2020-22212
SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22209
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22209
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
Sql injection
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
Sql injection
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
Sql injection
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
Sql injection
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22212
SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22211
CVE-2020-22211 describes an SQL injection in 74cms 3.2.0 exploitable via the key parameter to plus/ajax_street.php. The vulnerability arises from unsafely handling input in that parameter, enabling an attacker to execute arbitrary SQL queries on the database. Documented impact includes potential ...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
CVE-2020-22209
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22208
CVE-2020-22208 affects the 74cms platform (version 3.2.0) with a SQL Injection vulnerability via the x parameter of plus/ajax_street.php. The authenticated-free exploit allows arbitrary SQL statements, potentially leading to data leakage or database compromise. Multiple connected sources corrobor...