CVE-2023-4747

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.110

Description A critical issue was found in DedeCMS, affecting the /uploads/tags.php file. The manipulation of the tag alias argument leads to SQL injection. This issue can be exploited remotely.

Recommendations For DedeCMS version 5.7.110, update to a version that fixes the SQL injection issue in the /uploads/tags.php file, specifically addressing the manipulation of the tag alias argument. As a temporary workaround, consider restricting access to the /uploads/tags.php file to minimize the risk of exploitation.