CVE-2023-2059 DedeCMS select_templets.php path traversal

A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/selecttemplets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has...

CVE-2023-2059

A path traversal vulnerability exists in DedeCMS version 5.7.87 within the uploads/include/dialog/select_templets.php file. The root cause is a failure to properly validate the $activepath parameter, allowing an attacker to use '.. iledir' sequences to traverse directories. This flaw enables unau...