RULE(RULE ID:338283)

Rule General Information
Release Date: 2024-07-30
Rule Name: DedeCMS V 5.7.114 article_template_rand.php Remote Code Execution Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: DedeCMS is a well-known PHP open source website management system in China. The article_template_rand.php file in DedeCMSV 5.7 has a remote code execution vulnerability, which allows a remote attacker to execute arbitrary PHP code with the help of the templates parameter.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.