EIP-2026-106398
PRE-CVEDeDeCMS 5.5 - '_SESSION[dede_admin_id]' Authentication Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-106398. PoCs published by Wolves Security Team.
AI-analyzed exploit summary This exploit leverages an authentication bypass vulnerability in DeDeCMS by manipulating session variables and file upload functionality to achieve unauthorized access. The PoC demonstrates how an attacker can upload a malicious file (e.g., shell.asp) by bypassing authentication checks via the '_SESSION[dede_admin_id]' parameter.
Description
DeDeCMS 5.5 - '_SESSION[dede_admin_id]' Authentication Bypass
Exploits (1)
This exploit leverages an authentication bypass vulnerability in DeDeCMS by manipulating session variables and file upload functionality to achieve unauthorized access. The PoC demonstrates how an attacker can upload a malicious file (e.g., shell.asp) by bypassing authentication checks via the '_SESSION[dede_admin_id]' parameter.