CVE-2019-6289

uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension…

published January 15, 2019

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension and then renaming with a mixed-case variation of the .php extension, as demonstrated by the 1.pHP filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01929 · 79.8th percentile
Published
2019-01-15T06:00Z
EPSS history
Timeline
  • 15 JAN 06:00Z
    uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension…
    cvelistv5