225 matches found
Unauthorized Access Vulnerability in 74cms
74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information on the website...
74cms has a logic flaw vulnerability
74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. 74cms has a logic flaw vulnerability that can be exploited by attackers to change user passwords...
74cms 4.2.26 SQL Injection Vulnerability in Frontend Co***.php Page
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms 4.2.26 SQL injection vulnerability exists in the frontend Co.php page. An attacker can exploit the vulnerability to obtain sensitive information from the...
74cms Frontend SQL Injection Vulnerability
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...
CVE-2019-17612
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...
Sql injection
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...
CVE-2019-17612
CVE-2019-17612 affects 74CMS v5.2.8. The vulnerability is a SQL Injection caused by the _list method in Common/Controller/BackendController.class.php when processing the index.php?m=Admin&c=Ad&a=category sort parameter. According to the CVSS3.1 metrics, base score 7.2 (HIGH) with network attack v...
CVE-2019-17612
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...
CVE-2019-17612: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin&c=Ad&a=category sort parameter...
Arbitrary file download vulnerability in 74cms backend fi***_man***_js**.php page
Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background fimanjs.php page there are arbitrary file download vulnerability...
74cms backend Hr***.cl***.ph page has arbitrary file download vulnerability
Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Hr.cl.ph page there are arbitrary file download vulnerability. Attacker...
74CMS 5.0.1 Cross Site Request Forgery
Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS v5.0.1 has a CSRF vulnerability to add...
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
74CMS 5.0.1 - Cross-Site Request Forgery Add New Admin User Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE :...
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User) Exploit
Exploit for php platform in category web applications Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS...
74CMS 5.0.1 - Cross-Site Request Forgery (Add New Admin User)
Exploit Title: 74CMS v5.0.1 has a CSRF vulnerability to add a new admin user Date: 2019-04-14 Exploit Author: ax8 Vendor Homepage: https://github.com/Li-Siyuan Software Link: http://www.74cms.com/download/index.html Version: v5.0.1 CVE : CVE-2019-11374 74CMS v5.0.1 has a CSRF vulnerability to add...
Cross site request forgery (csrf)
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...
CVE-2019-11374
74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI...
CVE-2019-11374
CVE-2019-11374 affects 74CMS v5.0.1 and is a CSRF vulnerability that allows adding a new admin user via the URI index.php?m=Admin&c=admin&a=add. The Red Hat/ENISA/Exploit-DB entries corroborate the CSRF description and provide exploit samples; no official remediation details are included in the p...