206 matches found
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal=ajaxsavebasic pid parameter...
CVE-2019-10684
Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin=config=edit sitedomain parameter...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume=resumelist has XSS via the key parameter...
CVE-2019-17612
An issue was discovered in 74CMS v5.2.8. There is a SQL Injection generated by the list method in the Common/Controller/BackendController.class.php file via the index.php?m=Admin=Ad=category sort parameter...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329 74CMS index path traversal
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329 74CMS index path traversal
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been...
CVE-2025-4329
CVE-2025-4329 affects 74CMS up to v3.33.0. The vulnerability is in the function index of /index.php/index/download/index, where manipulating the url parameter enables path traversal. It can be exploited remotely and the exploit has been disclosed publicly. Mitigation guidance from PT-Security sug...
74cms 安全漏洞
74cms is an online recruitment system based on PHP and MySQL by 74cms. A security vulnerability exists in 74cms 3.33.0 and earlier versions, which stems from improper manipulation of the parameter url in the file /index.php/index/download/index, which could lead to path traversal attacks...
PT-2025-19925 · 74Cms · 74Cms
Name of the Vulnerable Software and Affected Versions: 74CMS versions up to 3.33.0 Description: A vulnerability was found in the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The explo...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
CVE-2024-46089
74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...
74cms 安全漏洞
XUNYI TECHNOLOGY 74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A security vulnerability exists in 74cms 3.33 and previous versions, the vulnerability stems from the background interface apiadmin is vulnerable to remote code execution attacks...