CVE-2020-22211

SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajaxstreet.php...

CVE-2020-22211

The 74cms talent recruitment system (version 3.2.0 ) is vulnerable to a SQL Injection (CWE-89) in the plus/ajax_street.php component. The root cause is a lack of protection for SQL query structures when processing the key parameter. Successful exploitation allows an attacker to execute arbitrary ...