Skip to content
OpenAdvisories

Vendor

DedeCMS

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php

    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the uninitialized code parameter passed to require_once. Attackers can supply path tra…