| tiêu đề | https://www.dedecms.com/ DeDeCMS V53_1_UTF8 SQL Injection |
|---|
| Mô tả | Introduction to DedeCMS
DedeCMS (Dede Content Management System) is one of the most well-known open-source PHP website management systems in China, celebrated for its simplicity, practicality and open-source nature. It is mainly used by individual webmasters and small-to-medium web portals, and also widely adopted by enterprises and schools.
- Official Website: https://www.dedecms.com/
- Download Link: https://down.chinaz.com/soft/24533.htm
- Affected Version: V53_1_UTF8
Vulnerability Principle
If the sql parameter is delivered via GET or POST requests, the system skips all security filtering mechanisms and executes the user-controllable input as native SQL statements, resulting in SQL injection. |
|---|
| Nguồn | ⚠️ https://uvxbywu62qm.feishu.cn/wiki/X1T5w8jPUinAsVkM0bhcZf4XnHe?from=from_copylink |
|---|
| Người dùng | hubdk01 (UID 99481) |
|---|
| Đệ trình | 03/07/2026 19:17 (cách đây 2 các tháng) |
|---|
| Kiểm duyệt | 19/08/2026 19:26 (2 months later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 393243 [DeDeCMS 53_1_UTF8 /plus/advancedsearch.php sql Tiêm SQL] |
|---|
| điểm | 20 |
|---|