CVE-2021-48016

🗓️ 22 Oct 2026 10:57:31Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

Unauthenticated RCE in DedeCMS via plus/flink.php?dopost=save PHP code injection.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-48016	22 Oct 202611:11	–	circl
CNNVD	DedeCMS code injection vulnerability	21 Oct 202616:00	–	cnnvd
Cvelist	CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php	22 Oct 202610:57	–	cvelist
EUVD	EUVD-2021-34899	22 Oct 202610:57	–	euvd
NVD	CVE-2021-48016	22 Oct 202611:17	–	nvd
Positive Technologies	PT-2026-121345	22 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2021-48016: Improper Control of Generation of Code	22 Oct 202600:00	–	rapid7
VulnCheck KEV	VulnCheck KEV: CVE-2021-48016	22 Oct 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2021-48016 DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php	22 Oct 202610:57	–	vulnrichment

Vulners

CNA

Node

dedecms dedecmsRange≤5.8.1

[
  {
    "defaultStatus": "unknown",
    "vendor": "DedeCMS",
    "product": "DedeCMS",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.8.1-beta"
      }
    ],
    "repo": "https://github.com/dedecms/DedeCMS",
    "packageURL": "pkg:github/dedecms/DedeCMS"
  }
]

Source	Link
github	www.github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/dedecms/dedecms-rce.yaml
srcincite	www.srcincite.io/blog/2021/09/30/chasing-a-dream-pwning-the-biggest-cms-in-china.html
vulncheck	www.vulncheck.com/advisories/dedecms-5.8.1-beta-unauthenticated-rce-via-plus-flink-php
github	www.github.com/dedecms/DedeCMS/blob/v5.8.1/include/common.func.php

Parameter	Position	Path	Description	CWE
dopost	query param	/plus/flink.php	PHP code injection vulnerability where the HTTP Referer header is written into a DedeTemplate string and included when dopost is used with an empty validate code.	CWE-94

29 Oct 2026 04:18Current

6.7Medium risk

Vulners AI Score6.7

CVSS 49.3

CVSS 3.19.8

EPSS0.00441

SSVC