CVE-2017-17731
Published · Updated
45Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 13%
from disclosure to weapon
Published on NVDDec 18
VulnCheck+2467d
exploitation probability
13%top 4% of all CVEs
observed exploitation
yesVulnCheck
DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.
Affected products
n/a · n/aReferences
http://0day5.com/archives/1346/