CyberRota Analysis
AI-GeneratedDedeCMS version 5.7.118 is vulnerable due to a path traversal flaw in the ExtractFile function of the include/zip.class.php component, allowing remote attackers to manipulate filename arguments. This vulnerability could lead to unauthorized access to sensitive files on the server. Organizations using this version of DedeCMS should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.