CVE-2019-10684

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit sitedomain parameter...

CVE-2019-10684

The CVE-2019-10684 entry affects 74cms v5.0.1, where Application/Admin/Controller/ConfigController.class.php exposes a remote PHP code execution flaw. The vulnerability is triggered via the index.php?m=Admin&c=config&a=edit site_domain parameter, enabling an attacker to run arbitrary PHP code on ...