| शीर्षक | An arbitrary file upload vulnerability in dede/baidunews.php of DedeCMS v5.7.111 allows attackers to execute arbitrary code via uploading a crafted PHP file. |
|---|
| विवरण | DedeCms, known for its simplicity, practicality, and open-source nature, is one of the most renowned PHP open-source website management systems in China. It is also one of the most widely used PHP-based content management systems (CMS) by users. However, a critical vulnerability exists in its auxiliary plugin, the baidunews.php, which allows for arbitrary file uploads. The content uploaded by users is controllable,and ultimately results in PHP file writes successfully, leading to remote code execution (RCE). |
|---|
| स्रोत | ⚠️ https://github.com/zzq66/cve/blob/main/rce_poc.md |
|---|
| उपयोगकर्ता | zzq66 (UID 55424) |
|---|
| सबमिशन | 28/09/2023 05:05 AM (3 साल पहले) |
|---|
| संयम | 29/09/2023 10:22 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 240948 [DedeCMS 5.7.111 baidunews.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|