Skip to content
OpenAdvisories
High · 8.8 CVE-2023-43226 EUVD-2023-47645GHSA-pv73-7cqr-xg4v

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via …

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by mitre

Description

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

References