CVE-2019-8933

CVE-2019-8933 describes an arbitrary file upload vulnerability in DedeCMS 5.7SP2, allowing authenticated attackers to upload and execute malicious PHP files. By manipulating template filenames within the administrative interface, an attacker can bypass security controls and achieve remote code execution. This vulnerability is rated as High severity (CVSS 8.8), indicating a low attack complexity and high impact on confidentiality, integrity, and availability. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, its high FAUCET Risk Score suggests significant potential for compromise.