| 标题 | Shanghai Zhuozhuo Network Technology Co. DedeCMS <=V5.7.118 Arbitrary File Deletion |
|---|
| 描述 | DedeCMS ≤ 5.7.118 has an arbitrary file deletion vulnerability in upload.php in the backend. Due to insecure directory traversal detection, an attacker can perform arbitrary file deletion attacks on Windows servers running DedeCMS after obtaining backend administrator privileges. |
|---|
| 来源 | ⚠️ https://gist.github.com/0psPwn/10c43912adee9bfe2ff4fec947d4ee5a |
|---|
| 用户 | Lin0ps (UID 95491) |
|---|
| 提交 | 2026-03-18 12時53分 (7 月前) |
|---|
| 管理 | 2026-04-04 08時54分 (17 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 200849 [DedeCMS 5.7.93 upload.php delete 权限提升] |
|---|
| 积分 | 0 |
|---|