CVE-2020-35339 In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server....
CriticalCVSS 9.8
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functions.php where attackers can obtain server permissions and control the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 74cms | = 5.0.1 | No fix listed |
References
- www.74cms.com product vendor-advisory
- github.com exploit third-party-advisory