CyberRota Analysis
AI-GeneratedDedeCMS versions up to 5.7.118 are vulnerable to a remote code injection due to improper handling of the 'aid' argument in the plus/mytag_js.php file. This vulnerability allows attackers to execute arbitrary code on the server, potentially compromising the integrity and confidentiality of the system. Organizations using affected versions of DedeCMS should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used.