2058 matches found
CVE-2022-43031
DedeCMS v6.1.9 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to arbitrarily add Administrator accounts and modify Admin passwords. The NVD entry (CVE-2022-43031) rates this as CVSS v3.1: 8.8 (High) with Network attack vector, no privileges required, user...
CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords...
CVE-2022-43031
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords...
DedeCMS Remote Code Execution (CVE-2022-35516)
A remote code execution vulnerability exists in DedeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
DedeCMS Command Injection (CVE-2022-34531)
A command injection vulnerability exists in DedeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
Privilege escalation
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40921: Unrestricted Upload of File with Dangerous Type
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS V5.7.99 version of a security...
CVE-2022-40921
CVE-2022-40921 refers to a vulnerability in DedeCMS v5.7.99 where an arbitrary file upload is possible through the component /dede/file_manage_control.php. The available documents consistently identify the affected product and the vulnerable function but do not detail the exact root cause beyond ...
PT-2022-25619 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.99 Description: The issue allows for an arbitrary file upload via the component /dede/file manage control.php. Recommendations: For DedeCMS version 5.7.99, at the moment, there is no information about a newer version that...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
CVE-2022-40886 is a file upload vulnerability in Dedecms. Connected sources confirm an arbitrary code execution path via /dede/file_manage_control.php (DedeCMS v5.7.101 noted) and describe it as related to an incomplete fix for this CVE. The initial entry cites DedeCMS 5.7.98 having a background ...