PT-2020-7848 · Dedecms · Dedecms

Zise · Published 2020-01-06 · Updated 2020-01-15 · CVE-2015-4553

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: DeDeCMS versions prior to 5.7-sp1

Description: A file upload issue exists, allowing malicious users to getshell.

Recommendations: For DeDeCMS versions prior to 5.7-sp1, update to version 5.7-sp1 or later to resolve the issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2015-4553

Affected Products

Dedecms

References · 4

• 🔥 https://exploit-db.com/exploits/37423 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2015/Jun/47 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-4553 · Security Note
• http://securityfocus.com/bid/75285 · Note