CVE-2023-27709

HIGH · CVSS 7.2 EPSS 1.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-03-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-27709

Severity

HIGH

CVSS

7.2

EPSS

1.30%

Original NVD Description

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.