Description
An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file.
Critical · 9.8
CVE-2022-42154
EUVD-2022-45231GHSA-j5m8-qv5m-qxgq
An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary co…
Published Oct 17, 2022 · Updated May 14, 2025 · Assigned by mitre