CVE-2009-2270: Code Injection
Unrestricted file upload vulnerability in member/uploadsedit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2270?
CVE-2009-2270 is considered a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2009-2270?
To fix CVE-2009-2270, update Dedecms to the latest version that addresses this unrestricted file upload vulnerability.
What is the impact of CVE-2009-2270?
The impact of CVE-2009-2270 includes the ability for attackers to upload malicious files and execute arbitrary code on the server.
Which versions of Dedecms are affected by CVE-2009-2270?
CVE-2009-2270 specifically affects Dedecms version 5.3.
How can I protect my website from CVE-2009-2270?
To protect your website from CVE-2009-2270, implement strict file upload validation and monitor for unusual file extensions.