Lucene search
China National Vulnerability DatabaseCNVD-2022-58381HistoryJun 27, 2022 - 12:00 a.m.
74cms SQL Injection Vulnerability (CNVD-2022-58381)
2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
sql injection
php
mysql
online recruitment system
china xunyi technology company
vulnerability
validation
external input
illegal commands
sensitive data
cnvd-2022-58381
EPSS
0.002
Percentile
55.3%
74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cmsSE version v3.5.1 is vulnerable to SQL injection, which originates from the lack of validation of external input SQL statements in the /home/campus/campus_job keyword parameter. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.
Related
cve
cve
CVE-2022-33097
2022-06-23 17:15:14
nvd
nvd
CVE-2022-33097
2022-06-23 17:15:14
cvelist
cvelist
CVE-2022-33097
2022-06-22 18:42:14
prion
prion
Sql injection
2022-06-23 17:15:00