74cms - ajax_street.php 'key' SQL Injection

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php. id: CVE-2020-22211 info: name: 74cms - ajaxstreet.php 'key' SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php. impact: | Successf...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

Sql injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22208

The 74cms talent recruitment system, specifically version 3.2.0 , contains a SQL Injection vulnerability in the plus/ajax_street.php component. The root cause is a lack of protection for SQL query structures when processing the x parameter. Successful exploitation allows an attacker to execute ar...

迅易科技 74cms SQL注入漏洞

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

CVE-2020-22208: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22211: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...