| शीर्षक | DedeCMS CMS V5.7.118 article_template_rand.php Remote Code Execution |
|---|
| विवरण | In DedeCMS version V5.7.118, remote code execution (RCE) is possible when a user is authenticated with administrator privileges.
The vulnerability is present in the "Report Settings" submenu, located within the "System Settings" menu. After viewing pre-used PHP code from DedeCMS, it's possible to insert additional PHP code, allowing the execution of commands on the server and, consequently, obtaining a reverse shell.
The application does not perform adequate validation to identify malicious PHP functions, allowing the use of the `system()` function, which enables the execution of arbitrary commands on the server. In contrast, other DedeCMS functionalities perform checks to block the inclusion of PHP code that invokes sensitive functions, such as `system()`.
As a proof of concept (PoC), the call `system("ls / && id")` was added, which made it possible to list the server directories and identify the UID of the running user. |
|---|
| स्रोत | ⚠️ http://localhost/dedecms/dede/article_template_rand.php |
|---|
| उपयोगकर्ता | mirandaBR (UID 90010) |
|---|
| सबमिशन | 30/01/2026 12:08 AM (8 महीनों पहले) |
|---|
| संयम | 01/02/2026 09:40 AM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 271995 [DedeCMS 5.7.114 article_template_rand.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|