Lucene search
K

20 matches found

CNVD
CNVD
added 2022/06/27 12:0 a.m.37 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58892)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cms version v3.5.1 suffers from a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in path/company. An attacker could exploit the...

4.3CVSS3.1AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.37 views

74cms cross-site scripting vulnerability (CNVD-2022-58888)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/account/safety/trade lack of data validation filtering of user-supplied data and output. An...

4.3CVSS3.3AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.22 views

74cms cross-site scripting vulnerability (CNVD-2022-58891)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/viewbebrowsed/total missing data validation filters for user-supplied data and output. An...

4.3CVSS3.4AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.28 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58894)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in /index/notice/show. An attacker could exploit...

4.3CVSS3.3AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.21 views

74cms cross-site scripting vulnerability (CNVD-2022-58889)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that originates from the path /company/downresume/total/nature lack of data validation filtering of user-supplied data and output. An attacker...

4.3CVSS3.2AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.25 views

74cms SQL Injection Vulnerability (CNVD-2022-58381)

74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of externally entered SQL statements in the keyword parameter of /home/campus/campusjob. An attacker...

7.5CVSS7.9AI score0.00246EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/27 12:0 a.m.33 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58893)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...

4.3CVSS3.3AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.27 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58890)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /company/service/increment/add/im missing data validation filters for user-supplied data and output. A...

4.3CVSS3.4AI score0.0024EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/27 12:0 a.m.48 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58895)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output from path/job. An attacker could exploit this vulnerabili...

4.3CVSS3.1AI score0.0024EPSS
Exploits1Affected Software1
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.4 views

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output from path/job. An attacker could exploit this vulnerabili...

6.1CVSS5.6AI score0.0024EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.2 views

74cms 安全漏洞

XUNYI TECHNOLOGY 74cms is a PHP and MySQL based online recruitment system from China Xunyi Technology Company. A security vulnerability exists in version 74cmsSE v3.5.1, which originates from an arbitrary file read vulnerability in indexcontrollerDownload.php...

7.5CVSS7.5AI score0.00265EPSS
Exploits1References2
CNVD
CNVD
added 2021/12/12 12:0 a.m.16 views

74 CMS Cross-Site Scripting Vulnerability (CNVD-2021-99667)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74CMS has a cross-site scripting vulnerability in version v6.0.4, which originates from /index.php?m=&c=help&a=helplist&key missing a data validation filter for user-supplied data and output. An attacker coul...

6.1CVSS3.5AI score0.0021EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.2 views

迅易科技 74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74CMS has a cross-site scripting vulnerability in version v6.0.4, which originates from /index.php?m=&c=help&a=helplist&key missing a data validation filter for user-supplied data and output. An attacker coul...

6.1CVSS5.7AI score0.0021EPSS
Exploits1References2
CNVD
CNVD
added 2021/06/17 12:0 a.m.9 views

74CMS SQL Injection Vulnerability (CNVD-2021-43380)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...

9.8CVSS7.6AI score0.43906EPSS
Exploits1References1
CNVD
CNVD
added 2021/06/17 12:0 a.m.6 views

74CMS SQL Injection Vulnerability (CNVD-2021-43390)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

9.8CVSS7.6AI score0.43906EPSS
Exploits1References1
CNVD
CNVD
added 2021/03/04 12:0 a.m.3 views

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co. Ltd (CNVD-2021-19735)

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS command execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

7.4AI score
Exploits0
CNVD
CNVD
added 2021/02/18 12:0 a.m.4 views

Code Execution Vulnerabilities in Knight CMS Backend of Taiyuan Xunyi Technology Co.

Knight CMS is a free and open source professional recruitment system based on PHP MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. Knight CMS code execution vulnerabilities exist in the background. Attackers can exploit the vulnerability to obtain control of the server...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/01/18 12:0 a.m.3 views

Command Execution Vulnerability in Knight CMS of Taiyuan Xunyi Technology Co.

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/11/05 12:0 a.m.1 views

XSS vulnerability in 74cms of Taiyuan Xunyi Technology Co.

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

6.1AI score
Exploits0
CNVD
CNVD
added 2020/09/09 12:0 a.m.0 views

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

7.3AI score
Exploits0
Rows per page
Query Builder