sysverifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control...
9.8CVSS6.1AI score0.01489EPSS
SaveExploits0References1
Cvelist•added 2018/04/02 3:0 a.m.•26 views
CVE-2018-9174
sysverifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control...
