Skip to content
Threat Feed
Subscribe

Product

DedeCMS (<= 5.8.1-Beta)

1 brief RSS
critical threat

DedeCMS: PHP code injection in ShowMsg() (CVE-2021-48016)

DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in the ShowMsg() function, allowing unauthenticated attackers to execute arbitrary system commands via a crafted HTTP Referer header.

PoC DedeCMS php-injection remote-code-execution web-application-vulnerability
1r 1t 1c