VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 28, 2023· Updated Sep 23, 2024

CVE-2023-43226

CVE-2023-43226

Description

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

2
  • Dedecms/Dedecmscpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <=5.7.111

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.

CVE-2023-43226 · VYPR