PT-2018-10967 · Dedecms · Dedecms

Publicado 2018-06-08 · Atualizado 2018-07-27 · CVE-2018-12046

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2

Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new .php file.

Recommendations For DedeCMS versions prior to 5.7SP2, consider disabling the file management functionality in dede/file manage control.php until a patch is available. Restrict access to the dede/file manage view.php endpoint to minimize the risk of exploitation. Avoid using the name and str parameters in the affected API endpoint until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-12046

Produtos afetados

Dedecms

Referências · 3

• 🔥 https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md · Exploit
• https://osv.dev/vulnerability/CVE-2018-12046 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12046 · Nota de Segurança