Sql injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22212

SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php...

CVE-2020-22212

CVE-2020-22212 affects 74CMS version 3.2.0, where a vulnerability in the id parameter of wap/wap-company-show.php allows SQL injection. The connected documents consistently describe a SQL injection vulnerability in 74CMS 3.2.0 via the id parameter, without detailing exploit vectors, impact scope,...

CVE-2020-22211

The 74cms talent recruitment system (version 3.2.0 ) is vulnerable to a SQL Injection (CWE-89) in the plus/ajax_street.php component. The root cause is a lack of protection for SQL query structures when processing the key parameter. Successful exploitation allows an attacker to execute arbitrary ...

CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22210

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22210

Vulnerability (CVE-2020-22210) exists in 74cms 3.2.0, specifically in the server-side script ajax_officebuilding.php where the x parameter is vulnerable to SQL injection. The Nuclei template and related records describe this as a SQL injection flaw with the potential to execute arbitrary SQL, lea...

CVE-2020-22209

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...

CVE-2020-22209

The 74cms recruitment system (version 3.2.0), developed by Taiyuan Xunyi Technology Co., Ltd. and based on the ThinkPHP framework, contains a SQL Injection vulnerability. The flaw exists in the plus/ajax_common.php file due to improper handling of query parameters. Successful exploitation allows ...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22208

The 74cms talent recruitment system, specifically version 3.2.0 , contains a SQL Injection vulnerability in the plus/ajax_street.php component. The root cause is a lack of protection for SQL query structures when processing the x parameter. Successful exploitation allows an attacker to execute ar...

CVE-2020-22211: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22210: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...

CVE-2020-22208: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

迅易科技 74cms SQL注入漏洞

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

CVE-2020-22209: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajaxcommon.php...