CVE-2023-2059

A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944.

• CWE-28

• https://github.com/ATZXC-RedTeam/cve/blob/main/dedecms.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225944Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225944Third Party Advisory
• https://github.com/ATZXC-RedTeam/cve/blob/main/dedecms.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.225944Permissions Required, Third Party Advisory
• https://vuldb.com/?id.225944Third Party Advisory

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20584IOMMU improperly handles certain special address ranges with…6
• CVE-2023-20585Insufficient checks of the RMP on host buffer access in IOMM…5.6
• CVE-2023-20586 A potential vulnerability was reported in Radeon™ Software …9.8
• CVE-2023-20587Improper Access Control in System Management Mode (SMM) may …7.1
• CVE-2023-20588 A division-by-zero error on some AMD processors can potenti…5.5
• CVE-2023-20589 An attacker with specialized hardware and physical access t…6.8
• CVE-2023-20591Improper re-initialization of IOMMU during the DRTM event ma…10
• CVE-2023-20592Improper or unexpected behavior of the INVD instruction in s…6.5
• CVE-2023-20593An issue in “Zen 2” CPUs, under specific microarchitectural …5.5
• CVE-2023-20594Improper initialization of variables in the DXE driver may a…4.4
• CVE-2023-20596Improper input validation in the SMM Supervisor may allow an…9.8
• CVE-2023-20597Improper initialization of variables in the DXE driver may a…5.5