CVE-2022-36216: Code Injection
Published Aug 17, 2022
·Updated
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in membertoadmin.php.
Affected Software
1 affected component
DedeCMS Dedecms>=5.7.94<=5.7.97
Event History
Aug 17, 2022
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this DedeCMS vulnerability?
The vulnerability ID for this DedeCMS vulnerability is CVE-2022-36216.
2
What is the severity of CVE-2022-36216?
The severity of CVE-2022-36216 is high with a severity value of 7.2.
3
What is the affected software version range for CVE-2022-36216?
The affected software versions for CVE-2022-36216 are DedeCMS v5.7.94 to v5.7.97.
4
What is the description of CVE-2022-36216?
CVE-2022-36216 is a remote code execution vulnerability in member_toadmin.php in DedeCMS v5.7.94 to v5.7.97.
5
Is there a proof of concept available for CVE-2022-36216?
Yes, a proof of concept for CVE-2022-36216 is available at the following link: [GitHub - DedeCMS v5.7.94 - v5.7.97 Remote Code Execution](https://github.com/whitehatl/Vulnerability/blob/main/web/dedecms/5.7.94/member_toadmin.poc.md)