CVE-2010-20125 | DedeCMS up to 5.6 plus/carbuyaction.php code permission assignment

October 30, 2026 Yanac

A vulnerability described as problematic has been identified in DedeCMS up to 5.6. Affected by this vulnerability is an unknown functionality of the file plus/carbuyaction.php. Executing a manipulation of the argument code can lead to incorrect permission assignment. This vulnerability only affects products that are no longer supported by the maintainer.

The identification of this vulnerability is CVE-2010-20125. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More