CVE-2026-51077

HighCVSS 7.5

Published: 27/07/2026(UTC)Updated: 28/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component.

Risk Assessment

An attacker can steal confidential data from the database, potentially leading to a breach of system confidentiality.

Recommendation

Immediately update Dede CMS to the latest version and apply input validation for the sqlquery parameter.

Other vulnerabilities in Dede CMS

CVE-2026-51078High
An issue in Dede CMS version 5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the file_manage_control.php component.

Original NVD description (English source)

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component