225 matches found
PT-2018-15389
Name of the Vulnerable Software and Affected Versions 74cms version 4.2.111 Description A security issue was found in the software, where the "upload/index.php?c=resume&a=resume list" endpoint is vulnerable to XSS attacks via the key parameter. Recommendations For version 4.2.111, as a temporary...
CVE-2018-20454: Improper Neutralization of Input During Web Page Generation
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...
XSS vulnerability in 74cms
74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms has an XSS vulnerability that allows an attacker to insert malicious js code into a page to obtain user cookies and other information, resulting in user hijacking...
SQL Injection Vulnerability in 74cms v4.2.54
Knight Talent System 74cms is a free website management system based on PHP+MYSQL. A SQL injection vulnerability exists in 74cms v4.2.54. An attacker can exploit this vulnerability to obtain sensitive database information...
SQL injection vulnerability in the resume_list function on page 74cms ResumeController.class.php
74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. A SQL injection vulnerability exists in the resumelist function on the 74cms ResumeController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...
74cms has an override access vulnerability
74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. The vulnerability is caused by the failure to limit the userid of the user , an attacker can use the vulnerability to delete the resume...
74cms has an override access vulnerability
74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms has an unauthorized access vulnerability. An attacker can use this vulnerability to gain unauthorized access to other people's messages...
74cms Home\Controller\PersonalController.class.php arbitrary file deletion
No description provided by source...
74cms background tpl_dir parameter arbitrary code execution vulnerability
Foreword No getshell audit is playing rogue. Today suddenly Emmanuel flashed, re-looked under 74cms, finally scored. The body 在Application/Common/Controller/BackendController.class.php There are so a period of terrible code public function updateconfig$newconfig, $configfile = " ! isfile$configfi...
Cross-site scripting vulnerability in 74cms (Knight Cms)
74cms knight cms is a PHP-based open source professional talent system. 74cms Knight cms suffers from a cross-site scripting vulnerability. Because the program fails to adequately filter user input, allowing an attacker to construct malicious web pages, inducing users to parse and execute arbitra...
74cms 3.7（20160604） sql injection vulnerability
No description provided by source...
74cms m\plus\ajax.php key参数 SQL注入
No description provided by source...
74cms /m/jobs-near-list.php 存在SQL注入
No description provided by source...
74cms v3.6 任意密码重置漏洞
No description provided by source...
74cms v3.6 申请友情链接 XSS漏洞
No description provided by source...
74cms(20150817) company_jobs.php SQL注入漏洞
No description provided by source...
74cms v3.6 (20150817) 设计缺陷导致8处不同文件注入漏洞(gpc=off)
No description provided by source...
74cms company_common.php SQL注入漏洞
No description provided by source...