Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-61444
HistoryJun 27, 2022 - 12:00 a.m.

74cmsSE SQL Injection Vulnerability

2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
74cmsse
sql injection
php mysql
validation
attack
sensitive data
vulnerability

EPSS

0.002

Percentile

55.3%

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from a lack of validation of externally entered SQL statements in the /home/resume/index keyword parameter. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

55.3%

Related for CNVD-2022-61444