CVE-2020-29279

Name of the Vulnerable Software and Affected Versions 74CMS versions prior to 6.0.48

Description The issue concerns a PHP remote file inclusion in the assign resume tpl method within the Application/Common/Controller/BaseController.class.php file. This allows for remote code execution.

Recommendations For versions prior to 6.0.48, update to version 6.0.48 or later to resolve the issue. As a temporary workaround, consider restricting access to the assign resume tpl method in BaseController.class.php to minimize the risk of exploitation.