← All advisories

Critical severity9.8NVD Advisory· Published Aug 27, 2021· Updated Jun 17, 2026

CVE-2020-18114

CVE-2020-18114

Description

An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format.

Affected products

3

Dedecms/Dedecms2 versions
cpe:2.3:a:dedecms:dedecms:5.7:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dedecms:dedecms:5.7:sp2:*:*:*:*:*:*
- (no CPE)range: 5.7SP2
DedeCMS/DedeCMSdescription

Patches

Vulnerability mechanics

References

1

blog.csdn.net/qq_36093477/article/details/86681178nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.