| Titolo | Shanghai Zhuozhuo Network Technology Co. DedeCMS <=V5.7.118 Arbitrary File Deletion |
|---|
| Descrizione | DedeCMS ≤ 5.7.118 has an arbitrary file deletion vulnerability in upload.php in the backend. Due to insecure directory traversal detection, an attacker can perform arbitrary file deletion attacks on Windows servers running DedeCMS after obtaining backend administrator privileges. |
|---|
| Fonte | ⚠️ https://gist.github.com/0psPwn/10c43912adee9bfe2ff4fec947d4ee5a |
|---|
| Utente | Lin0ps (UID 95491) |
|---|
| Sottomissione | 18/03/2026 12:53 (6 mesi fa) |
|---|
| Moderazione | 04/04/2026 08:54 (17 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 200849 [DedeCMS 5.7.93 upload.php delete escalationi di privilegi] |
|---|
| Punti | 0 |
|---|