A vulnerability was found in DedeCMS up to 5.7.118 in the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. Defenders should assess exposure and prioritize verification and remediation efforts. The vulnerability allows for remote code execution, potentially leading to unauthorized access and data breaches. Affected systems may be e [truncated]
A security flaw has been discovered in DedeCMS 5.7.118, impacting an unknown function of the file /plus/search.php in the Column Management component. The vulnerability allows for code injection through manipulation of the Column Name argument and can be exploited remotely. This issue may affect users of DedeCMS 5.7.118, and they should take necessary precautions to protect their systems. The vulnerabilit [truncated]
