74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php.Referenceshttps://github.com/PAINCLOWN/74cmsSE-Arbitrary-File-Reading/issues/1