| शीर्षक | https://www.dedecms.com/ DeDeCMS v3 Unrestricted Upload |
|---|
| विवरण | DedeCMS (Dede Content Management System) is one of the most renowned open-source PHP website management systems in China, well-known for its simplicity, practicality and open-source features. DedeCMS is mainly developed for individual webmasters and small-to-medium web portals, and it is also widely adopted by enterprises and educational institutions.
Official Website: https://www.dedecms.com/ Download Link: https://zdown.chinaz.com/%E5%85%B6%E5%AE%83%E7%B1%BB%E5%88%AB/dede3.rar
Involved version: V3
The cause of this file upload vulnerability: it relies only on client-controllable Content-Type to check the file type, doesn't block PHP and other script extensions, and the external parameter activepath isn't filtered, leading to directory traversal. It directly concatenates user-controlled filenames into the target path, allowing the upload and execution of a webshell.
https://uvxbywu62qm.feishu.cn/wiki/TKqDwJGYaiBVXpk3EtFcdjRDnsg?from=from_copylink |
|---|
| स्रोत | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/TKqDwJGYaiBVXpk3EtFcdjRDnsg?from=from_copylink |
|---|
| उपयोगकर्ता | huliangjia (UID 99519) |
|---|
| सबमिशन | 04/07/2026 01:44 PM (2 महीनों पहले) |
|---|
| संयम | 19/08/2026 09:29 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 393317 [DeDeCMS 3 select_media_post.php uploadfile अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|