CVE-2022-33093

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...

CVE-2018-20454

An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume=resumelist has XSS via the key parameter...

CVE-2022-33093

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...

CVE-2022-33095

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist...

CVE-2022-33093

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...

Sql injection

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...

74cms SQL injection vulnerability

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from the lack of validation of external input SQL statements in the /freelance/resumelist keyword parameter. An attacker could use this vulnerability to execute...

CVE-2022-33093

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resumelist...

PT-2022-21684

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A SQL injection issue was found in 74cmsSE via the key parameter at the "/freelance/resume list" API endpoint. Recommendations For 74cmsSE version 3.5.1, consider restricting access to the "/freelance/resume...

74cms Cross-Site Scripting Vulnerability

74cms is a PHP and MySQL based online recruitment system of Taiyuan Xunyi Technology Co. A cross-site scripting vulnerability exists in the upload/index.php?c=resume&a=resumelist page in version 4.2.111 of 74cms, which can be exploited by a remote attacker with the help of the 'key' parameter to...

CVE-2018-20454

An issue was discovered in 74cms v4.2.111. upload/index.php?c=resume&a=resumelist has XSS via the key parameter...

PT-2018-15389

Name of the Vulnerable Software and Affected Versions 74cms version 4.2.111 Description A security issue was found in the software, where the "upload/index.php?c=resume&a=resume list" endpoint is vulnerable to XSS attacks via the key parameter. Recommendations For version 4.2.111, as a temporary...

SQL injection vulnerability in the resume_list function on page 74cms ResumeController.class.php

74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. A SQL injection vulnerability exists in the resumelist function on the 74cms ResumeController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...