PT-2018-10967 · Dedecms · Dedecms

Published 2018-06-08 · Updated 2018-07-27 · CVE-2018-12046

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2

Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new .php file.

Recommendations For DedeCMS versions prior to 5.7SP2, consider disabling the file management functionality in dede/file manage control.php until a patch is available. Restrict access to the dede/file manage view.php endpoint to minimize the risk of exploitation. Avoid using the name and str parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-12046

Affected Products

Dedecms

References · 3

• 🔥 https://github.com/SukaraLin/php_code_audit_project/blob/master/dedecms/dedecms%20v5.7%20sp2%20%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md · Exploit
• https://osv.dev/vulnerability/CVE-2018-12046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12046 · Security Note