CVE-2017-17730

Critical

Published: 18/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

DedeCMS versions up to 5.7 are vulnerable to SQL Injection via the logo parameter in plus/flink_add.php.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to update DedeCMS to the latest version and implement input validation to mitigate the risk of SQL Injection attacks.

Original NVD description (English source)

DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.