CVE-2022-32131

CVE-2022-32131 affects 74cmsSE v3.5.1 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the /index/notice/show path. The CNA entries describe that lack of proper input validation/output encoding enables attacker-supplied data to execute JavaScript in the victim’s browser...

CVE-2022-32130

CVE-2022-32130 affects 74cmsSE v3.5.1. A reflective XSS flaw exists in the /company/down_resume/total/nature path caused by insufficient input validation/output encoding, allowing injected JavaScript to run in the viewer’s browser. Reported impact includes client-side code execution; CVSS metrics...

CVE-2022-32130

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/downresume/total/nature...

CVE-2022-32129

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/account/safety/trade...

CVE-2022-32129

CVE-2022-32129 affects 74cmsSE v3.5.1 and is a reflective XSS via the path /company/account/safety/trade. The vulnerability stems from inadequate input validation/escaping, allowing injected JavaScript to be executed in the victim’s browser. Impact is client-side script execution; exploitation is...

CVE-2022-32128

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/service/increment/add/im...

CVE-2022-32128

CVE-2022-32128 affects 74cmsSE v3.5.1, with a reflected XSS via the path /company/service/increment/add/im. The flaw originates from insufficient input validation/output encoding for user-supplied data, allowing injected JavaScript to run in the client. Impact is user-assisted script execution in...

CVE-2022-32126

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company...

CVE-2022-32127

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/viewbebrowsed/total...

CVE-2022-32127

CVE-2022-32127 affects 74cmsSE v3.5.1 with a reflective XSS via the path /company/view_be_browsed/total. The NVD entry notes a reflective XSS issue (C/L/I A impacts) with base scores: CVSSv2 4.3 (MEDIUM) and CVSSv3.1 6.1 (MEDIUM); exploit status is not described in the provided documents. Related...

CVE-2022-32126

CVE-2022-32126 corresponds to a reflected cross-site scripting (XSS) vulnerability in 74cmsSE v3.5.1, exploitable via the path /company. Multiple connected sources describe that user-supplied data in /company is not properly validated/filtered, allowing injection of JavaScript that would execute ...

CVE-2022-32125

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /job...

CVE-2022-32125

CVE-2022-32125 concerns 74cmsSE v3.5.1 with a reflective XSS via the /job path. The vulnerability stems from insufficient data validation/filtering of user-supplied input, enabling injection of JavaScript into the client. Affected product is 74cmsSE (PHP/MySQL-based recruitment system); no explic...

CVE-2022-32124

74cmsSE v3.5.1 contains a reflective XSS vulnerability in the component path /index/jobfairol/show/. The root cause is insufficient validation/encoding of user-supplied data in that endpoint, allowing injected JavaScript to be reflected back to the browser. Impact is client-side code execution in...

CVE-2022-32124

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...

CVE-2022-29720

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

CVE-2022-29721

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...

CVE-2022-29721

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...

CVE-2022-29720

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...

CVE-2022-29720

74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php...