PT-2018-10966 · Dedecms · Dedecms

Publicado 2018-06-08 · Atualizado 2018-07-27 · CVE-2018-12045

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to V5.7SP2

Description The issue allows for arbitrary file upload. This can be achieved by sending a request to the /dede/file manage view.php?fmdo=upload endpoint with a malicious upfile1 parameter, enabling the upload of unauthorized files, such as .php files.

Recommendations For versions prior to V5.7SP2, consider disabling the file upload functionality in dede/file manage control.php until a patch is available. Restrict access to the dede/file manage view.php endpoint to minimize the risk of exploitation. Avoid using the upfile1 parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-12045

Produtos afetados

Dedecms

Referências · 3

• 🔥 https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md · Exploit
• https://osv.dev/vulnerability/CVE-2018-12045 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12045 · Nota de Segurança