74CMS vulnerabilities
We track 2 vulnerabilities in 74CMS products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest 74CMS vulnerabilities
- 8.8 High severity
74CMS: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.php#sendCompanyLogo of the component Company Logo Handler. The manipulation of the a
- 9.8 Critical severity
74cmsse: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file.