74CMS File Upload Vulnerability

74CMS is an online recruitment system based on PHP and MySQL. A file upload vulnerability exists in version 3.28.0 of 74CMS, which stems from the lack of valid validation of the uploaded file by imgBase64, a parameter of the function sendCompanyLogo in file /controller/company/Index.php. The...

CVE-2024-2561

The vulnerability CVE-2024-2561 affects 74CMS 3.28.0. Affected component: Company Logo Handler, function sendCompanyLogo in /controller/company/Index.php#sendCompanyLogo. The arg imgBase64 can be manipulated to lead to unrestricted file upload, allowing remote execution per CNVD/CNNVD/PT security...

CVE-2024-2561: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in 74CMS 3.28.0. Affected by this issue is the function sendCompanyLogo of the file /controller/company/Index.phpsendCompanyLogo of the component Company Logo Handler. The manipulation of the argument imgBase64 leads to unrestricte...