DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
DedeCMS, a content management system for building websites, is affected through version 5.8.1-beta. An unauthenticated attacker can exploit this flaw to run arbitrary PHP code and system commands on the affected server, giving them full control over the site and its host.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
Affected versions
- DedeCMS DedeCMS
through 5.8.1-beta