{"id":"CVE-2010-20125","published":"2026-10-30T15:16:43Z","modified":"2026-10-30T19:23:25Z","title":"DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated…","vendor":"DedeCMS","product":"DedeCMS","tier":"core","eol":null,"description":{"text":"DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the include path by manipulating the uninitialized code parameter passed to require_once. Attackers can supply path traversal sequences ../../ to include arbitrary local files outside the intended payment directory, potentially achieving local file disclosure. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.","provenance":"source","from":"NVD"},"summary":null,"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"NVD"},"epss":null,"kev":null,"vulncheckKev":{"dateAdded":"2026-10-30","exploitedFirstSeen":"2026-10-30","ransomware":false,"evidence":[{"url":"https://www.cve.org/CVERecord?id=CVE-2010-20125","date":"2026-10-30"},{"url":"https://www.vulncheck.com/advisories/dedecms-file-inclusion-via-plus-carbuyaction-php","date":"2026-10-30"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-98","name":"Improper Control of Filename for Include/Require Statement in PHP Program"}],"references":[{"url":"https://github.com/dedecms/DedeCMS/blob/v5.6/plus/carbuyaction.php","tags":[]},{"url":"https://github.com/dedecms/DedeCMS/releases/tag/v5.7","tags":[]},{"url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/dedecms/dedecms-carbuyaction-fileinclude.yaml","tags":[]},{"url":"https://web.archive.org/web/20100630011301/https://www.myhack58.com/Article/html/3/62/2010/27387.htm","tags":[]},{"url":"https://www.cnblogs.com/milantgh/p/3615986.html","tags":[]},{"url":"https://www.vulncheck.com/advisories/dedecms-file-inclusion-via-plus-carbuyaction-php","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2010-5325","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-5325","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-30","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-20125","provenance":"source"},{"date":"2026-10-30","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cve.org/CVERecord?id=CVE-2010-20125","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":50.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 1 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":0.0,"detail":"no EPSS score"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}