Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2017-17731

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

  • Published: Dec 18, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-17731
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
dedecms / dedecms - 5.7.x