CVE-2026-71620

A File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code by uploading a crafted .php file. The root cause is insufficient validation of uploaded file types in the file upload functionality, enabling code execution on the server. No specific pa...

PT-2026-86243

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

EUVD-2026-71711

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...

EUVD-2026-71746

SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php component...

CVE-2026-71622

CVE-2026-71622 is a SQL injection vulnerability in APiAdmin v.5.0.1 (Zhao-github), located in the User.php component. A remote attacker can exploit it to obtain sensitive information . No CVSS metrics, confirmed exploit, or vendor-published fix are provided in the available documents. The entry i...

CVE-2022-42154

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

EUVD-2024-54434

Malicious code in bioql PyPI...

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A security vulnerability exists in 74cms 3.33 and previous versions, the vulnerability stems from the background interface apiadmin is vulnerable to remote code execution attacks...

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...

CVE-2022-42154

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...