CVE-2018-16785: High severity dedecms v6 vulnerability
Published Sep 19, 2018
·Updated
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell
Affected Software
1 affected component
DedeCMS Dedecms=5.7-sp2
Event History
Sep 19, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16785?
CVE-2018-16785 is classified as a high severity vulnerability.
2
How do I fix CVE-2018-16785?
To fix CVE-2018-16785, update DedeCMS to version 5.7 SP3 or later.
3
What impact can CVE-2018-16785 have on my website?
CVE-2018-16785 can allow attackers to create a webshell, leading to unauthorized access and control over the affected website.
4
Which versions of DedeCMS are affected by CVE-2018-16785?
CVE-2018-16785 affects DedeCMS version 5.7 SP2.
5
Is CVE-2018-16785 an XML injection vulnerability?
Yes, CVE-2018-16785 is an XML injection vulnerability that can be exploited by attackers.