CVE-2018-12045

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:5.7:*:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:5.7:sp1:*:*:*:*:*:*
cpe:2.3:a:dedecms:dedecms:5.7:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2018-06-08 01:29

Updated : 2024-02-28 16:25


NVD link : CVE-2018-12045

Mitre link : CVE-2018-12045

CVE.ORG link : CVE-2018-12045


JSON object : View

Products Affected

dedecms

  • dedecms
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type