An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18114
Reference (s):
- https://blog.csdn.net/qq_36093477/article/details/86681178