| शीर्षक | DeDecms DeDecms ≤ 5.7.112 Post-Auth File Upload |
|---|
| विवरण | This vulnerability is present in the latest version of the Dedecms product, 5.7.112, and affects all previous versions. Exploitation of the vulnerability requires an administrator account. Once logged into the backend, an attacker can exploit the vulnerability in the backend administrator module of Dedecms. This vulnerability allows for malicious file uploads. Although Dedecms has implemented stringent threat function interception measures, this vulnerability can be exploited by utilizing a .htaccess file to circumvent these protective measures. As a result, it enables the execution of arbitrary PHP code without any restrictions. |
|---|
| स्रोत | ⚠️ https://hmxwjm7x03.feishu.cn/docx/FPjhdYcQvocR4gxy34Rc0pmon5e?from=from_copylink |
|---|
| उपयोगकर्ता | Alphabug (UID 60726) |
|---|
| सबमिशन | 28/12/2023 11:23 AM (3 साल पहले) |
|---|
| संयम | 05/01/2024 11:58 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 249768 [DeDeCMS तक 5.7.112 Backend file_class.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|