CoreCVE
Back

CRITICAL

sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control

Published Apr 2, 2018

Description

sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-94

Code Injection

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 2, 2018
Updated Aug 5, 2024
Reserved Apr 1, 2018
Link CVE-2018-9174
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-9174
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-9174