PT-2025-17295 · 74Cms · 74Cms

Published 2025-04-18 · Updated 2025-04-21 · CVE-2024-46089

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions 74cms versions 3.33 and earlier

Description The issue concerns remote code execution (RCE) in the background interface apiadmin.

Recommendations For versions 3.33 and earlier, update to a version later than 3.33 to resolve the issue. As a temporary workaround, consider restricting access to the background interface apiadmin until a patch is available.

Exploit

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-46089

Affected Products

74Cms

References · 8

• 🔥 https://github.com/Q16G/cve_detail/blob/main/74cms/unzipRCE.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-46089 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46089 · Vendor Advisory
• https://t.me/cvetracker/21920 · Telegram Post
• https://gitee.com/Q16G/laravel_bug/blob/master/74cms.md · Note
• https://twitter.com/CVEnew/status/1913312985306841324 · Twitter Post
• https://t.me/cvedetector/23328 · Telegram Post
• https://twitter.com/SecAideInfo/status/1914261628930961888 · Twitter Post