CVE-2017-17731

Critical

Published: 18/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

DedeCMS through 5.7 is vulnerable to SQL Injection via the $_FILES superglobal in plus/recommend.php.

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to update DedeCMS to the latest version and implement input validation in plus/recommend.php.

Original NVD description (English source)

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.