CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A security vulnerability exists in 74cms 3.33 and previous versions, the vulnerability stems from the background interface apiadmin is vulnerable to remote code execution attacks...

CVE-2024-46089: Improper Neutralization of Special Elements used in a Command

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

CVE-2024-46089

The online recruitment system 74cms (developed by China Xunyi Technology Company) is vulnerable to Remote Code Execution (RCE) in the apiadmin background interface. This vulnerability affects versions 3.33 and earlier . The root cause involves the improper neutralization of special elements used ...

VulnCheck KEV: CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2024-2561

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

CVE-2024-2561 74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

CVE-2024-2561

The vulnerability CVE-2024-2561 affects 74CMS 3.28.0. Affected component: Company Logo Handler, function sendCompanyLogo in /controller/company/Index.php#sendCompanyLogo. The arg imgBase64 can be manipulated to lead to unrestricted file upload, allowing remote execution per CNVD/CNNVD/PT security...

CVE-2024-2561 74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

PT-2024-21039 · 74Cms · 74Cms

Name of the Vulnerable Software and Affected Versions: 74CMS version 3.28.0 Description: A critical issue has been found in the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads...

CVE-2024-2561: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in 74cms SE v3.12.0. An attacker can exploit this vulnerability to arbitrarily change the privileges and credentials of the super administrator account...

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58892)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cms version v3.5.1 suffers from a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in path/company. An attacker could exploit the...

74cms cross-site scripting vulnerability (CNVD-2022-58889)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/downresume/total/nature lack of data validation filtering of user-supplied data and output. An attacker...

74cms cross-site scripting vulnerability (CNVD-2022-58888)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/account/safety/trade lack of data validation filtering of user-supplied data and output. An...

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58893)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/account/safety/trade lack of data validation filtering of user-supplied data and output. An...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /company/service/increment/add/im missing data validation filters for user-supplied data and output. A...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cms version v3.5.1 suffers from a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in path/company. An attacker could exploit the...

74cms SQL Injection Vulnerability (CNVD-2022-43224)

74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of the keyword parameter in /home/jobfairol/resumelist for externally entered SQL statements. An...