SQL Injection Flaw in DedeCMS Affects Version 5.7.112
CVE-2024-3148

8.8HIGH

Key Information:

Vendor: DedeCMS
Status: Dedecms
Vendor: CVE Published:; 2 April 2024

Badges

👾 Exploit Exists

What is CVE-2024-3148?

A significant vulnerability exists in DedeCMS version 5.7.112, where improper handling of the script dede/makehtml_archives_action.php allows attackers to execute SQL injection attacks remotely. This flaw enables malicious users to alter database queries, potentially compromising sensitive data and system integrity. Although the vendor was informed of this issue, no response has been documented, leaving users at risk. It is critical for users of DedeCMS to apply necessary security measures or consider upgrading their systems to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch