CVE-2017-17731observed exploitation

CVE-2017-17731

40Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 5.6%

from disclosure to weapon

Published on NVDDec 18

VulnCheck+2467d

exploitation probability

5.6%top 8% of all CVEs

observed exploitation

yesVulnCheck

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

Affected products

References