CVE-2023-27707: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank parameter in the /dede/groupstore.php endpoint...