225 matches found
Code injection
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
CVE-2019-10684
The CVE-2019-10684 entry affects 74cms v5.0.1, where Application/Admin/Controller/ConfigController.class.php exposes a remote PHP code execution flaw. The vulnerability is triggered via the index.php?m=Admin&c=config&a=edit site_domain parameter, enabling an attacker to run arbitrary PHP code on ...
PT-2019-11990
Name of the Vulnerable Software and Affected Versions 74cms version 5.0.1 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the site domain parameter in the /index.php?m=Admin&c=config&a=edit API endpoint. Recommendations For version 5.0.1, as a...
CVE-2019-10684: Improper Control of Generation of Code
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...
SQL Injection Vulnerability in 74cms in***.php Page
Knight Talent System 74cms is a talent recruitment system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms in.php page, which can be exploited by attackers to obtain sensitive information...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
Code injection
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
CVE-2018-20519
The CVE-2018-20519 entry affects 74cms v4.2.111. A vulnerability allows remote authenticated users to read or modify arbitrary resumes by manipulating the job-search intent through the index.php?c=Personal&a=ajax_save_basic pid parameter, as described in multiple sources. This enables unauthorize...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
PT-2018-15411
Name of the Vulnerable Software and Affected Versions 74cms version 4.2.111 Description An issue in 74cms allows remote authenticated users to read or modify arbitrary resumes. This is achieved by changing a job-search intention, specifically through the "index.php?c=Personal&a=ajax save basic"...
CVE-2018-20519: Improper Input Validation
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
74cms Cross-Site Scripting Vulnerability
74cms is a PHP and MySQL based online recruitment system of Taiyuan Xunyi Technology Co. A cross-site scripting vulnerability exists in the upload/index.php?c=resume&a=resumelist page in version 4.2.111 of 74cms, which can be exploited by a remote attacker with the help of the 'key' parameter to...
Design/Logic Flaw
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...
CVE-2018-20454
CVE-2018-20454 affects 74cms v4.2.111. The issue is a cross-site scripting (XSS) vulnerability in the page uploaded/index.php?c=resume&a=resume_list, exploitable via the key parameter. The public documentation notes the vulnerability but provides no details on a patch or workaround. CVSS metrics ...