Submit #116167: DEDECMS v5.7.106 has a command execution vulnerabilityinfo

TitleDEDECMS v5.7.106 has a command execution vulnerability
DescriptionDEDECMS v5.7.106 has a serious command execution vulnerability that can bypass dede's own detection getshell. We can include a.inc file to generate a malicious.php suffix file.DEDECMS v5.7.106 has a serious command execution vulnerability that can bypass dede's own detection getshell. We can include a.inc file to generate a malicious.php suffix fileDEDECMS v5.7.106 has a serious command execution vulnerability that can bypass dede's own detection getshell. We can include a.inc file to generate a malicious.php suffix file
Source⚠️ https://gitee.com/xieqiangweb/cve/blob/master/dede/dedecms%20rce.md
User
 xieqiang (UID 43284)
Submission04/19/2023 14:24 (3 years ago)
Moderation04/29/2023 09:01 (10 days later)
StatusAccepted
VulDB entry227750 [DedeCMS 5.7.106 uploads/dede/config.php UpDateMemberModCache unrestricted upload]
Points20

Do you want to use VulDB in your project?

Use the official API to access entries easily!