CVE-2020-22209

CVE-2020-22209 affects 74cms v3.2.0, with a SQL injection in plus/ajax_common.php. The vulnerability arises from unsafe handling of query parameters (CWE-89), enabling arbitrary SQL via the parameter and potentially leading to unauthorized data access or leakage and database compromise (as noted ...