CVE-2018-7700
DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in…
published March 27, 2018
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.
What it is
DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.74118 · 99.5th percentile
- Published
- 2018-03-27T18:00Z
EPSS history
Timeline