Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Oct 30, 2024

CVE-2023-37839

Description

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

Dedecms/Dedecmscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 5.7.109

Patches

Vulnerability mechanics

References

github.com/yezere/src/blob/main/Dedecms%20v5.7.109%20Background%20Command%20Execution%20Vulnerability.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000