CVE-2019-6289

CVE-2019-6289 affects DedeCMS V57_UTF8_SP2. The vulnerability in uploads/include/dialog/select_soft.php enables remote code execution by uploading a file with a safe extension and then renaming it to a mixed-case variation of the .php extension (example: 1.pHP). CVSS data indicates high impact (C...