Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dedecms uploads_edit.php 文件上传漏洞
Vulnerability Description
Dedecms 5.3版本下的member/uploads_edit.php中的未限制文件上传漏洞允许远程攻击者通过上传一个有两个扩展的文件名的文件，然后借助未知向量访问该文件而执行任意代码。这已经通过带.jpg.php的文件名所证实。
CVSS Information
N/A
Vulnerability Type
N/A