Volerion logoVolerion
Volerion logoVolerion

DedeCMS SQL Injection Vulnerability in Flink.php

Vulnerability

A SQL injection vulnerability has been identified in DedeCMS version 5.7.88. The issue arises in the function dede_htmlspecialchars within the file plus/flink.php. The vulnerability can be exploited remotely, and public exploits are available.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify database information.

Added: Jun 2, 2026, 8:41 PM
Updated: Jun 2, 2026, 8:41 PM

Vulnerability Rating

Custom Algorithm
spread
6.4
impact
2.5
exploitability
9.7
remediation
0.0
relevance
9.8
threat
6.4
urgency
2.9
incentive
8.3

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.