Vendor
DedeCMS
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the uninitialized code parameter passed to require_once. Attackers can supply path tra…