Description
sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control.
Unscored
CVE-2018-9174
EUVD-2018-20771GHSA-rg3v-469f-2gxq
sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents…
Published Apr 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre