CVE-2018-16784

DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring

published September 21, 2018

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02329 · 83.3th percentile
Published
2018-09-21T15:00Z
EPSS history
Timeline
  • 21 SEP 15:00Z
    DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring
    cvelistv5