CVE-2022-32124

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...

CVE-2022-32131

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

CVE-2022-32131

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in /index/notice/show. An attacker could exploit...

CVE-2022-32124

74cmsSE v3.5.1 contains a reflective XSS vulnerability in the component path /index/jobfairol/show/. The root cause is insufficient validation/encoding of user-supplied data in that endpoint, allowing injected JavaScript to be reflected back to the browser. Impact is client-side code execution in...

PT-2022-21109

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A reflective cross-site scripting XSS issue was found in 74cmsSE. The issue can be exploited via the "/index/notice/show" API endpoint. Recommendations For version 3.5.1, update to a newer version that contain...

CVE-2022-32124: Improper Neutralization of Input During Web Page Generation

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...

PT-2022-21102

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description A reflective cross-site scripting XSS issue was found in the component /index/jobfairol/show/. This issue allows for the execution of malicious scripts on the client-side, potentially leading to unauthorized...

CVE-2022-32131: Improper Neutralization of Input During Web Page Generation

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48959)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/classes/Master.php?f=deletecategory The page lacks validation for external input SQL statements, which can b...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48960)

Product Show Room Site is a product showroom website from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/classes/Master.php?f=deleteinquiry page Lack of validation of external input SQL statements allows...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48958)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/admin/categories/managecategory.php? id=The page lacks validation for external input SQL statements, which c...

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/admin/categories/managefieldorder. php?id=page has a SQL injection issue. No detailed vulnerability details...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48961)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/admin/?page=products/viewproduct&id= page has a SQL injection issue. No detailed vulnerability details are...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48962)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=user/manageuser&id= page. SQL injection problem. No detailed vulnerability details are...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77047)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/categories/viewcategory.php?id = A SQL injection issue exists in the page, which can be exploited ...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77050)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77048)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=products/manageproduct& id= page has SQL injection problem, attackers can use the...

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77051)

Product Show Room Site is a product show room site. A SQL injection vulnerability exists in Product Show Room Site version 1.0, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...