CVE-2024-28671

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/stepselect_main.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the target system. As a temporary workaround, i...

CVE-2024-28682

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/sys_cache_up.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the CMS. As a temporary workaround, users are advised...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

PT-2024-22512 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The issue is related to the "/dede/freelist main.php" endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider...

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

CVE-2024-28670: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

CVE-2024-28681: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

CVE-2024-28668

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/mychannel_add.php component. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into sending a forged request to the application. While no officia...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28432

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_edit.php component. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access to the affect...

CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

PT-2024-22517 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...