迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

CVE-2020-22209: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

VulnCheck KEV: CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

74cms 6.0.20 has a logic flaw vulnerability

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to obtain sensitive information...

74cms 6.0.20 suffers from a logic flaw vulnerability (CNVD-2021-25005)

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. A logic flaw vulnerability exists in 74cms 6.0.20, which can be exploited by attackers to compromise the integrity of the system...

74CMS Remote Code Execution (CVE-2020-35339)

A remote code execution vulnerability exists in 74CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

Remote code execution

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-35339

CVE-2020-35339 affects 74CMS version 5.0.1. A remote code execution vulnerability exists in the files /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php, allowing an attacker to obtain server permissions and control the server. The issue is documented with...

CVE-2020-35339: Improper Control of Generation of Code

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

Remote code execution

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution...

CVE-2020-29279

The 74CMS (Knight CMS) website management system is vulnerable to a PHP remote file inclusion flaw in the assign_resume_tpl method of the Application/Common/Controller/BaseController.class.php file in versions prior to 6.0.48 . An attacker can exploit this vulnerability to achieve remote code exe...

74CMS 安全漏洞

Knight CMS 74cms is a free website management system based on PHP+MYSQL, providing perfect talent recruitment website construction program. There is a PHP remote file inclusion vulnerability in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in versions prior ...

XSS vulnerability in 74cms of Taiyuan Xunyi Technology Co.

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerability

74cms Knight cms talent system is a free open source professional recruitment system based on PHP + MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms background SQL injection vulnerabilities, attackers can exploit the vulnerability to obtain database sensitive information...