CVE-2020-22208

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...

CVE-2020-22208

The 74cms talent recruitment system, specifically version 3.2.0 , contains a SQL Injection vulnerability in the plus/ajax_street.php component. The root cause is a lack of protection for SQL query structures when processing the x parameter. Successful exploitation allows an attacker to execute ar...