CVE-2017-17727: Malicious File Upload
Published Dec 18, 2017
·Updated
DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/articleedit.php.
Affected Software
1 affected component
DedeCMS Dedecms<=5.6
Event History
Dec 18, 2017
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17727?
CVE-2017-17727 has a critical severity level due to its ability to allow arbitrary file uploads and PHP code execution.
2
How do I fix CVE-2017-17727?
To fix CVE-2017-17727, upgrade DedeCMS to version 5.7 or later, where the vulnerability is addressed.
3
What types of systems are affected by CVE-2017-17727?
CVE-2017-17727 affects DedeCMS versions up to 5.6, allowing arbitrary file uploads on vulnerable installations.
4
What is the impact of exploiting CVE-2017-17727?
Exploiting CVE-2017-17727 can lead to unauthorized access to systems and potential full control over the server due to code execution.
5
Is CVE-2017-17727 a vulnerability in all DedeCMS versions?
No, CVE-2017-17727 specifically affects DedeCMS versions 5.6 and earlier.