Submit #388362: dedebiz.com DedeBIZ v6.3.0 FileUploadinfo

Titlededebiz.com DedeBIZ v6.3.0 FileUpload
DescriptionIn the "admin/archives_do.php" page, when the dopost parameter is set to "uploadLitpic," there is a file upload vulnerability that allows attackers to upload .phtml files, bypassing the detection rules.
Source⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE17-3.md
User
 Dee.Mirage (UID 71702)
Submission08/09/2024 05:38 (2 years ago)
Moderation08/17/2024 19:06 (9 days later)
StatusAccepted
VulDB entry275031 [DedeBIZ 6.3.0 admin/archives_do.php AdminUpload litpic unrestricted upload]
Points17

Do you want to use VulDB in your project?

Use the official API to access entries easily!