{"schema":"threatline.record/2","record":{"id":"CVE-2021-48016","aliases":[],"summary":"DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php","details":"DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.","categories":["Unclassified"],"product":"DedeCMS","vendor":"DedeCMS","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-48016","source_modified_at":"2026-10-22T10:57:31.176Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"DedeCMS","vendor":"DedeCMS","versions":[{"status":"affected","version":"0","versionType":"custom","lessThanOrEqual":"5.8.1-beta"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00441,"percentile":0.37258,"score_date":"2026-10-23"},"published_at":"2026-10-22T10:57:31.176Z","modified_at":"2026-10-22T10:57:31.176Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2021-48016","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-22T10:57:31.176Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-48016","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://srcincite.io/blog/2021/09/30/chasing-a-dream-pwning-the-biggest-cms-in-china.html","tags":["technical-description","exploit"]},{"source":"CVE List","url":"https://github.com/dedecms/DedeCMS/blob/v5.8.1/include/common.func.php","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/dedecms/dedecms-rce.yaml","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/dedecms-5.8.1-beta-unauthenticated-rce-via-plus-flink-php","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-22T10:57:31.176Z","content_hash":"3441a86b94f37fd1fe6fb91f07c89c31eb038280c745c496eda60268cda95af5"}}