74CMS - Remote File Inclusion
PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. References: https://github.com/Ares-X/VulWiki/blob/master/Web%E5%AE%89%E5%85%A8/74cms/74cms%20v6.0.48%E6%A8%A1%E7%89%88%E6%B3%A8%E5%85%A5%2B%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%ABgetshell.md https://www.wangan.com/p/7fyg8ka5a6f81cb6 https://cloud.tencent.com/developer/article/1856739 Remediation: Update to version 6.0.48 or later.
Used 20 times · 10 assets checked · domain, subdomain, ipv4