CVE-2018-7700
HIGH 8.8EPSS 74.1%
DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.
- CVSS v3.0 NVD
- 8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 74.12% chance of exploitation in the next 30 days, 99th percentile
- Nuclei
- high · CWE-352
- Published
- 2018-03-27
- Updated
- 2024-08-05
Nuclei templates (1)
Exploit collections (2)
- dedecms-cve-2018-7700-rce.ymlchaitin/xray
- CVE-2018-7700.yamlzan8in/afrog