CVE-2024-11138

CVE-2024-11138 affects DedeCMS 5.7.116. The issue is in /dede/uploads/dede/friendlink_add.php where manipulating the logoimg argument allows unrestricted file uploads, enabling remote access potentially leading to remote code execution. Exploitation has been disclosed publicly per sources, indica...