Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
CWE-434