CVE-2017-17730

DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-18

Last modified

2024-09-16

Weaknesses

CWE-89

Affected products

• Dedecms (Dedecms)

References

• http://0day5.com/archives/1542/