Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:51 a.m.4 views

CVE-2022-42154

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS9.4AI score0.00916EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-54434

Malicious code in bioql PyPI...

6.3CVSS6.6AI score0.00452EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/04/26 4:36 a.m.15 views

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

6.3CVSS7.8AI score0.00452EPSS
Exploits1References1
NVD
NVD
added 2025/04/18 1:15 p.m.9 views

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

6.3CVSS0.00452EPSS
Exploits1References2
OSV
OSV
added 2025/04/18 1:15 p.m.3 views

CVE-2024-46089

74cms =3.33 is vulnerable to remote code execution RCE in the background interface apiadmin...

6.3CVSS6.3AI score
Exploits0References2
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.3 views

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A security vulnerability exists in 74cms 3.33 and previous versions, the vulnerability stems from the background interface apiadmin is vulnerable to remote code execution attacks...

6.3CVSS8AI score0.00452EPSS
Exploits1References2
OSV
OSV
added 2022/10/17 2:15 p.m.1 views

CVE-2022-42154

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6AI score0.00916EPSS
Exploits1References1
OSV
OSV
added 2022/10/17 2:15 p.m.2 views

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...

5.4CVSS5.9AI score0.00384EPSS
Exploits1References1
NVD
NVD
added 2022/10/17 2:15 p.m.12 views

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...

5.4CVSS0.00384EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/10/17 12:0 a.m.19 views

CVE-2022-41472

74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...

5.5AI score0.00384EPSS
Exploits1References1
Rows per page
Query Builder