PT-2022-27114 · Dedecmdv6 · Dedecmdv6

Yinfei6 · Published 2022-11-23 · Updated 2025-04-28 · CVE-2022-44118

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dedecmdv6 version 6.1.9

Description The issue allows for Remote Code Execution (RCE) via the file manage control.php endpoint.

Recommendations For dedecmdv6 version 6.1.9, consider restricting access to the file manage control.php endpoint until a patch is available.

Fix

Related Identifiers

CVE-2022-44118

Affected Products

Dedecmdv6

References · 6

• https://osv.dev/vulnerability/CVE-2022-44118 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44118 · Security Note
• https://t.me/cvenotify/38382 · Telegram Post
• https://t.me/cvenotify/120079 · Telegram Post
• https://gist.github.com/yinfei6/56bb396f579cb67840ed1ecb77460a5b · Note
• https://t.me/cibsecurity/53464 · Telegram Post