References https://nvd.nist.gov/vuln/detail/CVE-2022-34531 https://devhub.checkmarx.com/cve-details/cve-2022-34531/ https://github.com/Airrudder/vuls/blob/main/dedecms/DedeCMS-v5.7.95-RCE.md https://www.clouddefense.ai/cve/2022/CVE-2022-34531 https://cve.imfht.com/detail/CVE-2022-34531?lang=en http://opencve.cisoteria.com/cve/CVE-2022-34531
Related VulnerabilitiesPoCCVE-2026-21875: ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL InjectionPoCCVE-2024-57241: DedeCMS - Open Redirect via download.phpPoC(CVE-2025-15004)DedeCMS至5.7.118版本freelist_main.php文件orderby参数SQL注入漏洞CVE-2019-16759: vBulletin v5.0.0-v5.5.4 Remote Command ExecutionPoCCVE-2008-7269: UC Gateway Investment SiteEngine v5.0 - Open RedirectPoCCVE-2012-1823: PHP CGI v5.3.12/5.4.2 Remote Code ExecutionPoCCVE-2017-17731: DedeCMS 5.7 - SQL InjectionPoCCVE-2018-18608: DedeCMS 5.7 SP2 - Cross-Site ScriptingPoCCVE-2018-6910: DedeCMS 5.7 - Path DisclosurePoCCVE-2018-7700: DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code ExecutionPoCCVE-2020-12127: WAVLINK WN530H4 M30H4.V5030.190403 - Information DisclosurePoCCVE-2022-23347: BigAnt Server v5.6.06 - Local File InclusionPoCCVE-2022-26585: Mingsoft MCMS v5.2.7 - SQL Injection