{"cve":"CVE-2018-7700","epss":{"score":0.74118},"mitre":{"cpes":[],"created":"2018-03-27T18:00:00+00:00","description":"DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2018/7xxx/CVE-2018-7700.json","references":["https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/"],"title":null,"updated":"2024-08-05T06:31:05.085000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:dedecms:dedecms:5.7:*:*:*:*:*:*:*"],"created":"2018-03-27T18:29:00.243000+00:00","description":"DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.","metrics":{"cvssV2_0":{"score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cvssV3_0":{"score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2018/CVE-2018-7700.json","references":["https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/"],"title":null,"updated":"2026-06-17T02:03:33.133000+00:00","vendors":["dedecms","dedecms$PRODUCT$dedecms"],"weaknesses":["CWE-352"]},"opencve":{"changes":[{"created":"2025-07-14T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.92233},"old":{"score":0.92465}}}},"type":"metrics"}],"id":"22331927-aff2-48c5-a66c-cbea3a9bd1fe"}],"cpes":{"data":["cpe:2.3:a:dedecms:dedecms:5.7:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2018-03-27T18:00:00+00:00","provider":"mitre"},"description":{"data":"DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP code.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"provider":"nvd"},"cvssV3_0":{"data":{"score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.74118},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://laworigin.github.io/2018/03/07/CVE-2018-7700-dedecms%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C/"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T04:12:33.303000+00:00","provider":"nvd"},"vendors":{"data":["dedecms","dedecms$PRODUCT$dedecms"],"providers":["nvd"]},"weaknesses":{"data":["CWE-352"],"providers":["nvd"]}}}