YLoiK/74cmsSE-Arbitrary-file-upload-vulnerability

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-42154 ↗	Oct 17, 2022Monday, 17 October 2022, 14:15	9.8 CRITICAL	—
An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file.