cbcvebase.
CVE-2020-22208
published 2021-06-16

CVE-2020-22208: SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.

PriorityP277critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
9.74%
94.9th percentile
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.

Affected

1 ranges
VendorProductVersion rangeFixed in
74cms74cms——

Detection & IOCsextracted from sources · hover to see the quote

path/plus/ajax_street.php↗
  • →The exploit targets the table 'qs_admin' via UNION SELECT injection; monitor for SQL query patterns referencing 'qs_admin' in application logs or WAF logs.
  • →Response-based detection: a successful exploit returns the MD5 hash of '999999999' (value: 'c8c605999f3d8352d7bb792cf3fdb25b') in the HTTP response body.
  • →Shodan/FOFA fingerprint for exposed 74cms instances: search for http.html:"74cms", app="74cms", or body="74cms" to identify attack surface.
  • ·The vulnerability is unauthenticated (PR:N, UI:N) and network-accessible (AV:N), meaning no credentials are required to exploit it.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vulncheck9.8CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.