cve/2017/CVE-2017-17727.md
2024-05-28 00:32:59 +00:00

643 B

CVE-2017-17727

Description

DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.

POC

Reference

Github

No PoCs found on GitHub currently.