Security Advisory

CVE-2024-11138

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-11-12 18:00:15

Last updated 2024-11-13 14:18:18

Assigner VulDB

CVSS score 5.1

State PUBLISHED

Description

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗