Vulnerability — CVE-2023-27707

CVE-2023-27707

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-27707
Description:: SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint.
Last updated date:: 03/22/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 03/22/2023
Reference url to background: https://srpopty.github.io/2023/02/27/DedeCMS-V5.7.160-Backend-SQLi-group/