CVE-2018-12045

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dedecms:dedecms:5.7:sp1:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:5.7:sp2:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:5.7:*:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*

Information

Published : 2018-06-07 18:29

Updated : 2018-07-27 06:50


NVD link : CVE-2018-12045

Mitre link : CVE-2018-12045


JSON object : View

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type

Advertisement

dedicated server usa

Products Affected

dedecms

  • dedecms