Detections
Analytics
CVE-2025-5137
medium
Description
A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?action=getfiles of the component Incomplete Fix CVE-2018-9175. The manipulation of the argument refiles leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
Details
Published: 2025-05-25
Updated: 2025-06-10
Risk Information
CVSS v2
Base Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:M/C:P/I:P/A:P
Severity: Medium
CVSS v3
Base Score: 7.2
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: High
CVSS v4
Base Score: 5.1
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Severity: Medium
EPSS
EPSS: 0.0004