CVE-2019-10684

CRITICAL 9.8CVE-2019-10684 · Published 01/04/2019 · updated 17/06/2026

In short

CVE-2019-10684 is a CRITICAL (CVSS 9.8) vulnerability affecting 74cms (74cms).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
74cms 74cms	`= 5.0.1`	No fix yet

Description

Application/Admin/Controller/ConfigController.class.php in 74cms v5.0.1 allows remote attackers to execute arbitrary PHP code via the index.php?m=Admin&c=config&a=edit site_domain parameter.

References

kyrie403/Vuln · Exploit

More vulnerabilities in 74cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free