CVE-2024-35375: Malicious File Upload
There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35375?
CVE-2024-35375 is considered a critical vulnerability due to its potential for arbitrary file upload, which can lead to remote code execution.
How do I fix CVE-2024-35375?
To fix CVE-2024-35375, upgrade your DedeCMS installation to a patched version or restrict file upload capabilities on the media add .php page.
Which versions of DedeCMS are affected by CVE-2024-35375?
CVE-2024-35375 affects version 5.7.114 of DedeCMS.
What are the consequences of exploiting CVE-2024-35375?
Exploitation of CVE-2024-35375 can allow attackers to upload malicious files and potentially execute arbitrary code on the server.
How can I determine if my DedeCMS installation is vulnerable to CVE-2024-35375?
You can determine if your DedeCMS installation is vulnerable to CVE-2024-35375 by checking if you are running version 5.7.114 and testing the media add .php page for file upload weaknesses.