CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

CVE-2024-28668

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/mychannel_add.php component. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into sending a forged request to the application. While no officia...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28432

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_edit.php component. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access to the affect...

CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

PT-2024-22517 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...

CVE-2024-28666: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28429

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...

CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

PT-2024-22433 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article edit.php component. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS version 5.7, as a...

CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28682: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

CVE-2024-28670

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability via the /dede/freelist_main.php endpoint. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the CMS. While the impact is noted as partial wit...

CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...

CVE-2024-28676

DedeCMS v5.7 is vulnerable to a cross-site scripting (XSS) vulnerability within the /dede/article_edit.php API endpoint. This flaw is caused by the improper neutralization of input during web page generation. Exploitation could allow an attacker to execute malicious scripts in the context of the ...

PT-2024-22507 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/media add.php component. This allows an attacker to perform unintended actions on the web application. Recommendations: For DedeCMS version 5.7, a...

CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...

CVE-2024-28676: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...