PT-2018-10966

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to V5.7SP2 Description The issue allows for arbitrary file upload. This can be achieved by sending a request to the /dede/file manage view.php?fmdo=upload endpoint with a malicious upfile1 parameter, enabling the upload ...

PT-2018-10967

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2 Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new...