Description
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 74CMS | 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33.0 | — |
References
- VDB-307430 | 74CMS index path traversal vdb-entry technical-description
- VDB-307430 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #564318 | 74cms 74cms se 3.33 RCE third-party-advisory
- https://github.com/Q16G/cve_detail/blob/main/74cms/fileRead.md exploit