Approved changes feed: RSS · Atom

cpe:2.3:a:74cms:74cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor74Cms (e985bdfe-b6d5-5a59-a7d4-7fb33ab65b6b)
Product74Cms (cbc54e09-7053-5d7e-86ff-9e73dc24e58d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4329 vulnerable 2026-06-08 07:29:16.041492 74CMS index path traversal
MEDIUM (4.3)
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T07:00:08.731Z
Updated: 2025-05-06T14:11:17.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46089 vulnerable 2026-06-08 06:48:09.943918 Details available
74cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.
Published: 2025-04-18T00:00:00.000Z
Updated: 2025-04-18T13:50:50.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29279 vulnerable 2026-06-08 05:24:58.055313 Details available
PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution.
Published: 2020-12-02T21:08:44.000Z
Updated: 2024-08-04T16:48:01.779Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.