CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.78% chance of exploitation in the next 30 days, 78th percentile

Published

2022-11-23

Updated

2025-04-28

Proof-of-concept exploits (1)

• Athishpranav2003/CVE-2022-44118-Exploit0★ · 2023-07-04

Security advisories

• https://gist.github.com/yinfei6/56bb396f579cb67840ed1ecb77460a5b

References

• CVE Record
• NVD entry