225 matches found
74cms SQL注入漏洞
74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of the keyword parameter in /home/jobfairol/resumelist for externally entered SQL statements. An...
CVE-2020-22421
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
Cross site scripting
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
CVE-2020-22421
Summary: CVE-2020-22421 affects 74CMS v6.0.4, which contains a cross-site scripting (XSS) flaw exploitable via /index.php?m=&c=help&a=help_list&key. The root cause, as described in CNVD/CNNVD records, is missing data validation/filters for user-supplied input that is subsequently output, enabling...
CVE-2020-22421
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
CVE-2020-22421: Improper Neutralization of Input During Web Page Generation
74CMS v6.0.4 was discovered to contain a cross-site scripting XSS vulnerability via /index.php?m=&c=help&a=helplist&key...
74CMS SQL Injection Vulnerability (CNVD-2021-43390)
74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...
74CMS SQL Injection Vulnerability
74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the id parameter of wap/wap-company-show.php...
74CMS SQL Injection Vulnerability (CNVD-2021-43389)
74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...
74CMS SQL Injection Vulnerability (CNVD-2021-43391)
74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the key parameter of plus/ajaxstreet.php...
74CMS SQL Injection Vulnerability (CNVD-2021-43380)
74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...
CVE-2020-22209
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
CVE-2020-22211
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22209
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...
CVE-2020-22210
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...