Security Advisory
CVE-2018-9174
9.8
CRITICAL
Vulnerability Description
sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an attacker's control.
Published Date
April 2, 2018
Official Source
NIST NVD Advisory