Description
DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.
Unscored
CVE-2017-17727
EUVD-2017-8879GHSA-w4p7-x3pj-j76x
DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the temp…
Published Dec 18, 2017 · Updated Sep 16, 2024 · Assigned by mitre