2058 matches found
CVE-2018-16786: Improper Neutralization of Input During Web Page Generation
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
File Upload Vulnerability in DedeCMS v5.7 SP2
Dream Content Management System DedeCMS is a PHP open source website management system. A file upload vulnerability exists in DedeCMS v5.7 SP2. Attackers can exploit the vulnerability to upload image Trojans and gain server privileges...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
Design/Logic Flaw
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
CVE-2018-16785
The connected sources confirm a concrete vulnerability in DedeCMS v5.7 SP2 (PHP-based CMS): a file-write flaw that attackers can exploit to write a script file and obtain a webshell. This CVE (CVE-2018-16785) is described as affecting DedeCMS 5.7 SP2 with XML injection/file-write mechanics enabli...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
PT-2018-13747
Name of the Vulnerable Software and Affected Versions DedeCMS version V5.7 SP2 Description A vulnerability exists in DedeCMS, allowing attackers to create a script file and obtain a webshell through XML injection. Recommendations For DedeCMS version V5.7 SP2, at the moment, there is no informatio...
CVE-2018-16785: XML Injection (aka Blind XPath Injection)
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
SQL Injection Vulnerability in DedeCMS
DedeCMS is a web content management system based on PHP+MySQL technology that supports multiple server platforms. A SQL injection vulnerability exists in DedeCMS v5.7 SP2, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in DedeCMS V5.7-SP2 ta***.php page
Weaving dream content management system DedeCms is a PHP open source website management system. A SQL injection vulnerability exists in the DedeCMS V5.7-SP2 ta.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
Note DedeCMS a hash length of the expanding attacks caused by unauthorized vulnerability-vulnerability warning-the black bar safety net
Vulnerability impact: Dedecmsweaving dreams CMS V5. 7. 72 the official version of the 20180109 latest version The vulnerability principle DedeCMS user authentication by the authentication Cookie in the DedeUserID and DedeUserIDckMd5 carried out, as follows: ! Where$cfgcookieencode is installed wh...
CVE-2018-12045
DedeCMS through V5.7SP2 allows arbitrary file upload in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file...
CVE-2018-12046
DedeCMS through 5.7SP2 allows arbitrary file write in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file...
CVE-2018-12046
DedeCMS through 5.7SP2 allows arbitrary file write in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file...
Design/Logic Flaw
DedeCMS through 5.7SP2 allows arbitrary file write in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file...
Default credentials
DedeCMS through V5.7SP2 allows arbitrary file upload in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file...
CVE-2018-12045
DedeCMS through V5.7SP2 allows arbitrary file upload in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file...
CVE-2018-12046
The CVE-2018-12046 entry concerns DedeCMS up to version 5.7SP2. A flaw in dede/file_manage_control.php allows arbitrary file write via a request to dede/file_manage_view.php?fmdo=newfile, passing name and str parameters to write a new PHP file. This is the stated vulnerability and impact in the p...