Metrics
Affected Vendors & Products
Tue, 10 Dec 2024 21:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:dedecms:dedecms:5.7.116:*:*:*:*:*:*:* |
Wed, 13 Nov 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Dedecms
Dedecms dedecms |
|
CPEs | cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:* | |
Vendors & Products |
Dedecms
Dedecms dedecms |
|
Metrics |
ssvc
|
Tue, 12 Nov 2024 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. | |
Title | DedeCMS friendlink_add.php unrestricted upload | |
Weaknesses | CWE-284 CWE-434 |
|
References |
| |
Metrics |
cvssV2_0
|
Status: PUBLISHED
Assigner: VulDB
Published: 2024-11-12T18:00:15.714Z
Updated: 2024-11-13T14:18:18.315Z
Reserved: 2024-11-12T12:56:06.989Z
Link: CVE-2024-11138
Updated: 2024-11-13T14:18:12.843Z
Status : Analyzed
Published: 2024-11-12T18:15:17.543
Modified: 2024-12-10T21:11:45.043
Link: CVE-2024-11138
No data.