Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-17727

Description

DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.

POC

Reference

- https://www.seebug.org/vuldb/ssvid-20050

Github

No PoCs found on GitHub currently.