DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
| CVE | CVE-2021-48016 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| CWE | CWE-94 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Producto afectado
DedeCMS 5.8.1
Producto derivado de la descripción (el CPE estructurado de NVD aún no está publicado).