CVE-2023-2059 PoC — DedeCMS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2059.yaml

Associated Vulnerability

Title:DedeCMS 安全漏洞 (CVE-2023-2059)
Description:Desdev DedeCMS（织梦内容管理系统）是中国卓卓网络（Desdev）公司的一套基于PHP的开源内容管理系统（CMS）。该系统具有内容发布、内容管理、内容编辑和内容检索等功能。 DedeCMS 5.7.87版本存在安全漏洞，该漏洞源于文件uploads/include/dialog/select_templets.php存在问题，会导致路径遍历。

Description

Directory traversal vulnerability in DedeCMS 5.7.87 allows reading sensitive files via the $activepath parameter.

File Snapshot


 id: CVE-2023-2059

info:
  name: DedeCMS 5.7.87 - Directory Traversal
  author: pussycat0x
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!