exploitDog

CVE-2023-27733

Опубликовано: 17 апр. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.

Ссылки

https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md
Exploit
Third Party Advisory
https://sha999-crypto.github.io/2023/02/28/Dedecms%20background%20SQL%20injection%20vulnerability/
Exploit
Third Party Advisory
https://github.com/Ephemeral1y/Vulnerability/blob/master/DedeCMS/5.7.98/DedeCMS-v5.7.98-RCE.md
Exploit
Third Party Advisory
https://sha999-crypto.github.io/2023/02/28/Dedecms%20background%20SQL%20injection%20vulnerability/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dedecms:dedecms:5.7.106:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00086

Низкий

7.2 High

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-7r5m-2rp9-gxvf

CVSS3: 7.2

github

почти 3 года назад

DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.

EPSS

Процентиль: 25%

0.00086

Низкий

7.2 High

CVSS3

Дефекты

CWE-89

CWE-89