PT-2024-22515 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was discovered in DedeCMS. The issue is related to the "/dede/mychannel edit.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...

CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28432

DedeCMS v5.7 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability in the /dede/article_edit.php component. The issue enables unauthorized actions to be performed on behalf of an authenticated user, with impact described as high (CVSS 3.1: HIGH for confidentiality, integrity, and avail...

CVE-2024-28667

CVE-2024-28667 concerns DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) vulnerability in the component /dede/templets_one_edit.php. Evidence across multiple sources consistently identifies the issue as CSRF affecting DedeCMS 5.7, with no public details on exploit vectors in the provided doc...

CVE-2024-28671

CVE-2024-28671 affects DedeCMS v5.7 with a CSRF vulnerability exploitable via /dede/stepselect_main.php. Root cause: cross-site request forgery leading to unauthorized state-changing actions. CVSSv3.1 base score 8.8 (HIGH) with Network attack vector, low attack complexity, no privileges required ...

CVE-2024-28676

Summary: CVE-2024-28676 affects DedeCMS v5.7 with a cross-site scripting (XSS) flaw exposed via the /dede/article_edit.php endpoint. The vulnerability is characterized as XSS that could impact users interacting with that API path. Several connected advisories confirm the issue but do not provide ...

CVE-2024-28666

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

PT-2024-22507 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/media add.php component. This allows an attacker to perform unintended actions on the web application. Recommendations: For DedeCMS version 5.7, a...

PT-2024-22526 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the component /dede/module main.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the /dede/module...