Skip to content
Sign in
5.1 Medium

CVE-2025-5137 A vulnerability was found in DedeCMS 5.7.117

Description

A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getfiles of the component Incomplete Fix CVE-2018-9175. The manipulation of the argument refiles leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products and versions

Product Affected versions Fixed in
DedeCMS 5.7.117 No fix stated

Other CVEs of DedeCMS

The 54 CVEs of DedeCMS →
CVE-2026-116253 A vulnerability was determined in DedeCMS 5.7.118 6.9 Medium CVE-2026-116063 A weakness has been identified in DedeCMS up to 5.7.118 5.1 Medium CVE-2026-94004 A vulnerability was found in DedeCMS up to 5.7.118 6.9 Medium CVE-2026-76800 A flaw has been found in DeDeCMS 3 5.3 Medium
Track this CVE