CVE-2023-2056 — DedeCMS module_main.php GetSystemFile code injection

Description (CNA)

A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
n/a / DedeCMS	affected 5.7.0; affected 5.7.1; affected 5.7.2; affected 5.7.3; affected 5.7.4; affected 5.7.5; affected 5.7.6; affected 5.7.7; affected 5.7.8; affected 5.7.9; affected 5.7.10; affected 5.7.11; affected 5.7.12; affected 5.7.13; affected 5.7.14; affected 5.7.15; affected 5.7.16; affected 5.7.17; affected 5.7.18; affected 5.7.19; affected 5.7.20; affected 5.7.21; affected 5.7.22; affected 5.7.23; affected 5.7.24; affected 5.7.25; affected 5.7.26; affected 5.7.27; affected 5.7.28; affected 5.7.29; affected 5.7.30; affected 5.7.31; affected 5.7.32; affected 5.7.33; affected 5.7.34; affected 5.7.35; affected 5.7.36; affected 5.7.37; affected 5.7.38; affected 5.7.39; affected 5.7.40; affected 5.7.41; affected 5.7.42; affected 5.7.43; affected 5.7.44; affected 5.7.45; affected 5.7.46; affected 5.7.47; affected 5.7.48; affected 5.7.49; affected 5.7.50; affected 5.7.51; affected 5.7.52; affected 5.7.53; affected 5.7.54; affected 5.7.55; affected 5.7.56; affected 5.7.57; affected 5.7.58; affected 5.7.59; affected 5.7.60; affected 5.7.61; affected 5.7.62; affected 5.7.63; affected 5.7.64; affected 5.7.65; affected 5.7.66; affected 5.7.67; affected 5.7.68; affected 5.7.69; affected 5.7.70; affected 5.7.71; affected 5.7.72; affected 5.7.73; affected 5.7.74; affected 5.7.75; affected 5.7.76; affected 5.7.77; affected 5.7.78; affected 5.7.79; affected 5.7.80; affected 5.7.81; affected 5.7.82; affected 5.7.83; affected 5.7.84; affected 5.7.85; affected 5.7.86; affected 5.7.87

Vendor / product

Versions

n/a / DedeCMS

affected 5.7.0; affected 5.7.1; affected 5.7.2; affected 5.7.3; affected 5.7.4; affected 5.7.5; affected 5.7.6; affected 5.7.7; affected 5.7.8; affected 5.7.9; affected 5.7.10; affected 5.7.11; affected 5.7.12; affected 5.7.13; affected 5.7.14; affected 5.7.15; affected 5.7.16; affected 5.7.17; affected 5.7.18; affected 5.7.19; affected 5.7.20; affected 5.7.21; affected 5.7.22; affected 5.7.23; affected 5.7.24; affected 5.7.25; affected 5.7.26; affected 5.7.27; affected 5.7.28; affected 5.7.29; affected 5.7.30; affected 5.7.31; affected 5.7.32; affected 5.7.33; affected 5.7.34; affected 5.7.35; affected 5.7.36; affected 5.7.37; affected 5.7.38; affected 5.7.39; affected 5.7.40; affected 5.7.41; affected 5.7.42; affected 5.7.43; affected 5.7.44; affected 5.7.45; affected 5.7.46; affected 5.7.47; affected 5.7.48; affected 5.7.49; affected 5.7.50; affected 5.7.51; affected 5.7.52; affected 5.7.53; affected 5.7.54; affected 5.7.55; affected 5.7.56; affected 5.7.57; affected 5.7.58; affected 5.7.59; affected 5.7.60; affected 5.7.61; affected 5.7.62; affected 5.7.63; affected 5.7.64; affected 5.7.65; affected 5.7.66; affected 5.7.67; affected 5.7.68; affected 5.7.69; affected 5.7.70; affected 5.7.71; affected 5.7.72; affected 5.7.73; affected 5.7.74; affected 5.7.75; affected 5.7.76; affected 5.7.77; affected 5.7.78; affected 5.7.79; affected 5.7.80; affected 5.7.81; affected 5.7.82; affected 5.7.83; affected 5.7.84; affected 5.7.85; affected 5.7.86; affected 5.7.87

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.