A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.
mitre·CWE-434·Published 2020-01-06