CVE-2018-20129

An issue was discovered in DedeCMS V5.7 SP2

published December 13, 2018

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

An issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows remote attackers to upload and execute arbitrary PHP code via a double extension and a modified ".php" substring, in conjunction with the image/jpeg content type, as demonstrated by the filename=1.jpg.p*hp value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08226 · 94.8th percentile
Published
2018-12-13T08:00Z
EPSS history
Timeline
  • 13 DEC 08:00Z
    An issue was discovered in DedeCMS V5.7 SP2
    cvelistv5