PT-2022-19797

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.5.1 Description The issue is related to an arbitrary file read vulnerability. It affects the component indexcontrollerDownload.php. Recommendations For 74cmsSE version 3.5.1, update to a version that fixes the arbitrary file...

PT-2022-17757

Name of the Vulnerable Software and Affected Versions 74cmsSE version 3.4.1 Description The issue allows for an arbitrary file read via the url parameter at the indexcontrollerDownload.php endpoint. Recommendations For 74cmsSE version 3.4.1, avoid using the url parameter in the...