CVE-2023-2928

creationtimestamp| type| source ---|---|--- 2023-05-27 14:29:16+00:00| seen| https://t.me/cibsecurity/64740 2023-10-10 08:59:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5345...

CVE-2023-2928 DedeCMS article_allowurl_edit.php code injection

A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/articleallowurledit.php. The manipulation of the argument allurls leads to code injection. The attack can be launched remotely...