CVE-2024-2820

A vulnerability classified as problematic was found in DedeCMS 5.7. Affected by this vulnerability is an unknown functionality of the file /src/dede/baidunews.php. The manipulation of the argument filename leads to cross-site request forgery. The attack can be launched remotely. The exploit has...

PT-2023-28736 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS versions 5.7.111 and earlier Description: An arbitrary file upload vulnerability in dede/baidunews.php allows attackers to execute arbitrary code via uploading a crafted PHP file. Recommendations: For DedeCMS versions 5.7.111 and...