PT-2022-26792 · Dedecmdv6 · Dedecmdv6
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
dedecmdv6 version 6.1.9
Description
The issue allows for Arbitrary file deletion via the "file manage control.php" endpoint.
Recommendations
For dedecmdv6 version 6.1.9, consider restricting access to the "file manage control.php" endpoint until a patch is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dedecmdv6