CVE-2017-17731: SQL Injection
Published Dec 18, 2017
·Updated
DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php.
Affected Software
1 affected component
DedeCMS Dedecms<=5.7
Event History
Dec 18, 2017
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-17731?
The severity of CVE-2017-17731 is considered critical due to its ability to facilitate SQL Injection attacks.
2
How do I fix CVE-2017-17731?
To fix CVE-2017-17731, upgrade DedeCMS to a version newer than 5.7 that has addressed this vulnerability.
3
What is the impact of CVE-2017-17731?
The impact of CVE-2017-17731 includes potential unauthorized data access and the possibility of executing arbitrary SQL commands.
4
Which versions of DedeCMS are affected by CVE-2017-17731?
DedeCMS versions up to and including 5.7 are affected by CVE-2017-17731.
5
How does CVE-2017-17731 exploit the $_FILES superglobal?
CVE-2017-17731 exploits the $_FILES superglobal by allowing attackers to inject malicious SQL queries through file upload requests.