Vulnetix
Try Vulnetix Request Demo
CVE-2023-5301 PUBLISHED CVSS 4.699999809265137 MEDIUM

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240940.

EPSS 0.59% · 69.1th percentile

Risk Scores

CVSS v3.1
4.699999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.59%
69.1th percentile

Affected Products

VendorProductVersions
dedecmsdedecms5.7.111, 5.7.111, 5.7.111
n/aDedeCMS5.7.111, 5.7.111, 5.7.111

Timeline

References

Open in Interactive Console →