CVE-2020-22208

Name of the Vulnerable Software and Affected Versions 74cms version 3.2.0

Description The issue is related to a lack of protection against SQL query structure attacks in the plus/ajax street.php component of the 74cms system. This can be exploited by a remote attacker to execute arbitrary SQL queries through the x parameter.

Recommendations For 74cms version 3.2.0, consider restricting access to the plus/ajax street.php endpoint until a patch is available, and avoid using the x parameter in this endpoint to minimize the risk of exploitation.