Vulnerability Description
DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the uninitialized code parameter passed to require_once. Attackers can supply path traversal sequences ../../ to include arbitrary local files outside the intended payment directory, potentially achieving local file disclosure. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/dedecms/DedeCMS/blob/v5.6/plus/carbuyaction.php
- https://github.com/dedecms/DedeCMS/releases/tag/v5.7
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilit
- https://web.archive.org/web/20100630011301/https://www.myhack58.com/Article/html
- https://www.cnblogs.com/milantgh/p/3615986.html
- https://www.vulncheck.com/advisories/dedecms-file-inclusion-via-plus-carbuyactio
FAQ
What is CVE-2010-20125?
CVE-2010-20125 is a vulnerability with a CVSS score of 7.5 (HIGH). DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the uninitialized code para...
How severe is CVE-2010-20125?
CVE-2010-20125 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-20125?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.