Skip to content

CVE-2017-17731 DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

CriticalCVSS 9.8 EPSS 13.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

Affected products

ProductAffected versionsFixed in
dedecms <= 5.7 No fix listed

References

  • 0day5.com exploit issue-tracking third-party-advisory