74CMS File Upload Vulnerability

74CMS is an online recruitment system based on PHP and MySQL. A file upload vulnerability exists in version 3.28.0 of 74CMS, which stems from the lack of valid validation of the uploaded file by imgBase64, a parameter of the function sendCompanyLogo in file /controller/company/Index.php. The...

CVE-2024-2561

The vulnerability CVE-2024-2561 affects 74CMS 3.28.0. Affected component: Company Logo Handler, function sendCompanyLogo in /controller/company/Index.php#sendCompanyLogo. The arg imgBase64 can be manipulated to lead to unrestricted file upload, allowing remote execution per CNVD/CNNVD/PT security...