Administrator code execution via inconsistent refiles filtering

Code injection in DedeCMS 5.7.117 allows remote authenticated users with administrator access to execute PHP code through refiles. In dede/sys_verifies.php, global escaping adds a backslash before a quote, then a second filter removes the quote but leaves the backslash; two array elements can consequently escape and reshape the generated PHP file. An administrator session and an attacker-controlled uploaded file are required; successful exploitation runs that file as the web service account.