Dedecms: >> Dedecms Security Vulnerabilities
SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter.
CVSS Score
7.5
EPSS Score
0.001
Published
2009-10-27
Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.
CVSS Score
6.8
EPSS Score
0.011
Published
2009-07-01
Page 17