CVE-2024-4590

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...

CVE-2024-4593

CVE-2024-4593 concerns DedeCMS 5.7, where the vulnerability lies in the file /src/dede/sys_multiserv.php. The issue is described as a cross‑site request forgery (CSRF) that can be triggered remotely, with the exploit publicly disclosed. Several connected sources consistently identify the affected...

CVE-2024-4592

CVE-2024-4592 affects DedeCMS 5.7, specifically the /src/dede/sys_group_edit.php file. The vulnerability is a cross-site request forgery (CSRF) in unknown code paths, with remote initiation and public disclosure of the exploit. Multiple connected sources corroborate the affected software/version ...

CVE-2024-4591 DedeCMS sys_group_add.php cross-site request forgery

A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sysgroupadd.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

CVE-2024-4591

The CVE concerns DedeCMS 5.7, with a CSRF issue in the file /src/dede/sys_group_add.php. The vulnerability enables cross-site request forgery via a potentially remote-initiated attack. Multiple sources in the provided documents identify the affected product and component, and note that the exploi...

CVE-2024-4590

CVE-2024-4590 affects DedeCMS 5.7, with the vulnerable element in /src/dede/sys_info.php. The issue enables cross-site request forgery (CSRF) via manipulation of that file’s functionality. The attack is described as remotely launchable and the exploit has been disclosed publicly. Exploitation det...

CVE-2024-4589

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/mytagedit.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2024-4587

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4587

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4589 DedeCMS mytag_edit.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/mytagedit.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2024-4589

CVE-2024-4589 affects DedeCMS 5.7, with vulnerability in the file /src/dede/mytag_edit.php leading to cross-site request forgery. The initial descriptions indicate a remote, publicly disclosed exploit and a non-specified impact on confidentiality and integrity, limited to CSRF (I:L) and no availa...

CVE-2024-4588 DedeCMS mytag_add.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/mytagadd.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-4588

CVE-2024-4588 affects DedeCMS 5.7, with a CSRF flaw in /src/dede/mytag_add.php. The vulnerability is exploitable remotely and has publicly disclosed exploit information. Affected function is unspecified; vendor fix/version not clearly documented in the provided sources. Reports from multiple feed...

CVE-2024-4587 DedeCMS tpl.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7 and classified as problematic. This issue affects some unknown processing of the file /src/dede/tpl.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use...

CVE-2024-4587

CVE-2024-4587 affects DedeCMS 5.7, with CSRF in /src/dede/tpl.php. The vulnerability can be triggered remotely; exploitation has been disclosed publicly. Documents do not specify a patch or official remediation. A PT Security advisory suggests restricting access to the affected file as a temporar...

CVE-2024-4586 DedeCMS shops_delivery.php cross-site request forgery

A vulnerability has been found in DedeCMS 5.7 and classified as problematic. This vulnerability affects unknown code of the file /src/dede/shopsdelivery.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public an...

CVE-2024-4585

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/membertype.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-4585 DedeCMS member_type.php cross-site request forgery

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/membertype.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-4585 DedeCMS member_type.php cross-site request forgery

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/membertype.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-4585

CVE-2024-4585 affects DedeCMS 5.7, with the vulnerability located in the file /src/dede/member_type.php. The issue is described as a cross-site request forgery (CSRF) that can be initiated remotely and for which exploits have been disclosed to the public. Multiple sources in the connected documen...