CVE-2025-4329

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-4329
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

References
Link Resource
https://github.com/Q16G/cve_detail/blob/main/74cms/fileRead.md Exploit Third Party Advisory
https://github.com/Q16G/cve_detail/blob/main/74cms/fileRead.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.307430 Permissions Required VDB Entry
https://vuldb.com/?id.307430 Third Party Advisory VDB Entry
https://vuldb.com/?submit.564318 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:74cms:74cms:*:*:*:*:*:*:*:*
History

12 Jun 2025, 17:24

Type Values Removed Values Added
References () https://vuldb.com/?id.307430 - () https://vuldb.com/?id.307430 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.307430 - () https://vuldb.com/?ctiid.307430 - Permissions Required, VDB Entry
References () https://github.com/Q16G/cve_detail/blob/main/74cms/fileRead.md - () https://github.com/Q16G/cve_detail/blob/main/74cms/fileRead.md - Exploit, Third Party Advisory
References () https://vuldb.com/?submit.564318 - () https://vuldb.com/?submit.564318 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:74cms:74cms:*:*:*:*:*:*:*:*
First Time 74cms
74cms 74cms

06 May 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : unknown
CWE CWE-22

06 May 2025, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-06 07:15

Updated : 2025-06-12 17:24

NVD link : CVE-2025-4329

Mitre link : CVE-2025-4329

JSON object : View

Products Affected

74cms

  • 74cms
CWE

No CWE.