CVE-2025-50857

ZenTaoPMS versions v18.11 through v21.6.beta are vulnerable to a Directory Traversal flaw located in the /module/ai/control.php file. This vulnerability is triggered through the file upload functionality, where an attacker can use a specially crafted file upload to achieve arbitrary code executio...

PT-2022-25619 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.99 Description: The issue allows for an arbitrary file upload via the component /dede/file manage control.php. Recommendations: For DedeCMS version 5.7.99, at the moment, there is no information about a newer version that...