CVE-2020-35339: Improper Control of Generation of Code

In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server...

PT-2021-11755

Name of the Vulnerable Software and Affected Versions: 74cms version 5.0.1 Description: The issue is a remote code execution vulnerability located in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php. This allows attackers to obtain server permissions and...

CVE-2019-10684: Improper Control of Generation of Code

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...