CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2018-12046

DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md
https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md

Products affected by CVE-2018-12046

Dedecms » Dedecms » Version: N/A

cpe:2.3:a:dedecms:dedecms:-
Dedecms » Dedecms » Version: 5.5

cpe:2.3:a:dedecms:dedecms:5.5
Dedecms » Dedecms » Version: 5.6

cpe:2.3:a:dedecms:dedecms:5.6
Dedecms » Dedecms » Version: 5.7

cpe:2.3:a:dedecms:dedecms:5.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-12046

Products

Pricing

Contact Us