Dede CMS 漏洞列表

Dede CMS contains a SQL injection vulnerability which allows remote unauthenticated users to inject arbitrary SQL statements via the ajax_membergroup.php endpoint and the membergroup parameter. shodan-query: http.html:"DedeCms"

DedeCMS 存在远程代码执行漏洞。此漏洞是由于select_images_post接口对上传的文件校验不正确导致的。