Critical severity9.8NVD Advisory· Published Jul 13, 2023· Updated Jun 17, 2026

CVE-2023-37839

Description

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

Dedecms/Dedecms3 versions
cpe:2.3:a:dedecms:dedecms:5.7.109:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:dedecms:dedecms:5.7.109:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =5.7.109

Patches

Vulnerability mechanics

References

github.com/yezere/src/blob/main/Dedecms%20v5.7.109%20Background%20Command%20Execution%20Vulnerability.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000