CVE-2022-33113

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...

PT-2022-21695

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module. Recommendations For Jfinal CMS version 5.1.0,...

74cms SQL注入漏洞

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from a lack of validation of externally entered SQL statements in the /home/resume/index keyword parameter. An attacker could use this vulnerability to execute...

CVE-2022-33113: Improper Neutralization of Input During Web Page Generation

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...

74cms SQL注入漏洞

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from a lack of validation of externally entered SQL statements in the /home/job/map keyword parameter. An attacker could use this vulnerability to execute illega...

CVE-2022-33097

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campusjob...

CVE-2022-33097

CVE-2022-33097 affects 74cmsSE v3.5.1. Root cause: SQL injection via the keyword parameter in /home/campus/campus_job. Impact: attacker could execute arbitrary SQL to access data. Exploitation details are not provided in the documents; no remediation details are included in the connected sources.

CVE-2022-33095

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...

CVE-2022-33095

CVE-2022-33095 affects 74cmsSE v3.5.1, with a SQL injection in the keyword parameter at /home/jobfairol/resumelist. The CNVD/CNNVD entries describe lack of input validation enabling arbitrary SQL execution to access data, while Red Hat/ENISA entries confirm the issue but do not provide concrete f...

CVE-2022-33096

CVE-2022-33096 affects 74cmsSE v3.5.1, with a SQL injection in the keyword parameter of /home/resume/index. The vulnerability arises from unsanitized input used in SQL queries, exposing potentially confidential data. Documented impact under CVSS 3.1 indicates high confidentiality impact (C:H) wit...

CVE-2022-33094

Summary: CVE-2022-33094 affects 74cmsSE v3.5.1, where a SQL injection vulnerability exists via the keyword parameter at /home/job/map. The issue arises from insufficient input validation, allowing an attacker to manipulate SQL queries and potentially access sensitive data. The CVSS data in the pr...

CVE-2022-33092

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/index...

PT-2022-21683

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/job/index" API endpoint. Recommendations For version 3.5.1, avoid using the keyword parameter in the "/home/job/index" API...

CVE-2022-33094: Improper Neutralization of Special Elements used in an SQL Command

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map...

PT-2022-21685

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/job/map" API endpoint. This allows for potential SQL injection attacks. Recommendations For 74cmsSE version 3.5.1, consider...

PT-2022-21686

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/jobfairol/resumelist" API endpoint. Recommendations For version 3.5.1, avoid using the keyword parameter in the affected API...

CVE-2022-33092: Improper Neutralization of Special Elements used in an SQL Command

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/index...

PT-2022-21687

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the keyword parameter at the "/home/resume/index" API endpoint. Recommendations For version 3.5.1, avoid using the keyword parameter in the "/home/resume/index" A...

CVE-2022-33097: Improper Neutralization of Special Elements used in an SQL Command

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campusjob...

CVE-2022-33096: Improper Neutralization of Special Elements used in an SQL Command

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/resume/index...