Intrusion PreventionDeDeCMS.tag_test_action.Remote.Code.Execution
Description
This indicates an attack attempt to exploit a Remote Code Execution Vulnerability in DeDeCMS.
The vulnerability is due to insufficient check with HTTP requests for partcode paremeter. A remote attacker could exploit this vulnerability by sending crafted HTTP requests to the target server. Successful exploitation could result in remote code execution on the vulnerable system.
Affected Products
DedeCMS 5.7
Impact
System Compromise: Remote attacker can gain control of vulnerable systems.
Recommended Actions
Currently we are unaware of any vendor supplied patch or updates available for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52909 |
| Created | Apr 27, 2023 |
| Updated | Jun 09, 2023 |
| Risk |
|
| CVE ID | CVE-2018-7700 |
| Exploit Prediction Score | 42.81% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | PHP_app |