CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2018-12045

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md

Products affected by CVE-2018-12045

Dedecms » Dedecms » Version: N/A

cpe:2.3:a:dedecms:dedecms:-
Dedecms » Dedecms » Version: 5.5

cpe:2.3:a:dedecms:dedecms:5.5
Dedecms » Dedecms » Version: 5.6

cpe:2.3:a:dedecms:dedecms:5.6
Dedecms » Dedecms » Version: 5.7

cpe:2.3:a:dedecms:dedecms:5.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12045

Products

Pricing

Contact Us