11 matches found
CVE-2022-33093
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume=resumelist has XSS via the key parameter...
CVE-2022-33093
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...
CVE-2022-33095
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...
CVE-2022-33093
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...
Sql injection
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...
74cms SQL注入漏洞
74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from the lack of validation of external input SQL statements in the /freelance/resumelist keyword parameter. An attacker could use this vulnerability to execute...
CVE-2022-33093
74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...
74cms Cross-Site Scripting Vulnerability
74cms is a PHP and MySQL based online recruitment system of Taiyuan Xunyi Technology Co. A cross-site scripting vulnerability exists in the upload/index.php?c=resume&a=resumelist page in version 4.2.111 of 74cms, which can be exploited by a remote attacker with the help of the 'key' parameter to...
CVE-2018-20454
An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...
SQL injection vulnerability in the resume_list function on page 74cms ResumeController.class.php
74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. A SQL injection vulnerability exists in the resumelist function on the 74cms ResumeController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...