| शीर्षक | 上海卓卓网络科技有限公司 DedeCMS 5.7.118 Command Shell in Externally Accessible Directory |
|---|
| विवरण | DedeCMS V5.7.118 has a remote code execution vulnerability. Attackers can modify column names in the background management system to write malicious PHP code to the column cache file, leading to remote code execution. This vulnerability does not require file uploads or special configuration, only administrator privileges are needed to complete the attack. |
|---|
| स्रोत | ⚠️ https://github.com/DunkBoyZz/cve/blob/cb7d6aa088d5ae4b603399af0a3279c18b084f11/DedeCMS%20V5.7.118%20Column%20Name%20Cache%20File%20Writing%20RCE%20Vulnerability.docx |
|---|
| उपयोगकर्ता | dunkboy (UID 98888) |
|---|
| सबमिशन | 10/06/2026 10:34 AM (1 महीना पहले) |
|---|
| संयम | 12/07/2026 06:08 PM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 377878 [DedeCMS 5.7.118 Column Management /plus/search.php Column Name अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|