3 matches found
Sql injection
DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php...