5.3
Moyenne
CVE-2024-4790 A vulnerability classified as problematic has been found in DedeCMS 5.7.114
Description
A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263889 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DedeCMS | 5.7.114 | Pas de correctif indiqué |
Références
- VDB-263889 | DedeCMS path traversal vuldb.com
- VDB-263889 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #329483 | https://www.dedecms.com/ dedecms V5.7.114 Directory traversal vuldb.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de DedeCMS
Les 54 CVE de DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Moyenne
CVE-2026-116063
A weakness has been identified in DedeCMS up to 5.7.118
5.1
Moyenne
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Moyenne
CVE-2026-76800
A flaw has been found in DeDeCMS 3
5.3
Moyenne