İçeriğe atla
Noroxi

74cms kayıtları

74cms üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

36 kayıt
  • CVE-2020-29279
    55Planlayın

    PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 a

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    74cms · 74cms2 Ara 2020

  • CVE-2020-22208
    42Planlayın

    SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    74cms · 74cms16 Haz 2021

  • CVE-2020-22209
    42Planlayın

    SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    74cms · 74cms16 Haz 2021

  • CVE-2020-22210
    42Planlayın

    SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    74cms · 74cms16 Haz 2021

  • CVE-2020-22211
    41Planlayın

    SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    74cms · 74cms16 Haz 2021

  • CVE-2020-35339
    40Planlayın

    In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /Thin

    KritikCVSS 9,8İstismar yokEPSS %4

    74cms · 74cms17 Şub 2021

  • CVE-2019-10684
    40Planlayın

    Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.

    KritikCVSS 9,8İstismar yokEPSS %2

    74cms · 74cms1 Nis 2019

  • CVE-2020-22212
    39İzleyin

    SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    74cms · 74cms16 Haz 2021

  • CVE-2022-42154
    39İzleyin

    An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary cod

    KritikCVSS 9,8İstismar yokEPSS %1

    74cms · 74cmsse17 Eki 2022

  • CVE-2019-11374
    38İzleyin

    74CMS v5.0.1 has a CSRF vulnerability to add a new admin user via the index.php?m=Admin&c=admin&a=add URI.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    74cms · 74cms20 Nis 2019

  • CVE-2024-2561
    37İzleyin

    74CMS Company Logo Index.php#sendCompanyLogo unrestricted upload

    YüksekCVSS 8,8İstismar yokEPSS %6

    74cms · 74cms17 Mar 2024

  • CVE-2018-20519
    32İzleyin

    An issue was discovered in 74cms v4.2.111.

    YüksekCVSS 8,1İstismar yokEPSS %1

    74cms · 74cms27 Ara 2018

  • CVE-2022-26271
    31İzleyin

    74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    74cms · 74cms27 Mar 2022

  • CVE-2022-33095
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-29721
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse26 May 2022

  • CVE-2022-33093
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the key parameter at /freelance/resume_list.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-33096
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/resume/index.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-33097
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campus_job.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-33092
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/index.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-33094
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/job/map.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse23 Haz 2022

  • CVE-2022-29720
    30İzleyin

    74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php.

    YüksekCVSS 7,5İstismar yokEPSS %1

    74cms · 74cmsse26 May 2022

  • CVE-2019-17612
    28İzleyin

    An issue was discovered in 74CMS v5.2.8.

    YüksekCVSS 7,2İstismar yokEPSS %1

    74cms · 74cms15 Eki 2019

  • CVE-2022-41471
    26İzleyin

    74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Admin

    OrtaCVSS 6,5İstismar yokEPSS %1

    74cms · 74cmsse17 Eki 2022

  • CVE-2024-46089
    25İzleyin

    74cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.

    OrtaCVSS 6,3İstismar yokEPSS %1

    74cms · 74cms18 Nis 2025

  • CVE-2020-22421
    24İzleyin

    74CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key.

    OrtaCVSS 6,1İstismar yokEPSS %1

    74cms · 74cms8 Ara 2021