1715 matches found
PT-2023-27684 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist edit.php" API endpoint via the title parameter. Recommendations: For DedeCMS versions...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40875
DedeCMS (Dream Weaving CMS) up to and including version 5.7.110 contains multiple cross‑site scripting (XSS) vulnerabilities in the vote_edit.php endpoint, exploitable via the votename and votenote parameters. The issue is described across multiple sources as XSS vulnerabilities affecting that pa...
CVE-2023-40874
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteadd.php via the votename and voteitem1 parameters...
CVE-2023-40875
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...
CVE-2023-40875
DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/voteedit.php via the votename and votenote parameters...
Desdev DedeCMS 跨站脚本漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...
CVE-2023-40876
DedeCMS up to version 5.7.110 has a cross-site scripting (XSS) vulnerability in /dede/freelist_add.php via the title parameter. The affected software is DedeCMS; the root cause is unsanitized input in the title field. Exploitation status and remediation details are not provided in the connected d...
PT-2023-27682 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the "/dede/vote edit.php" API endpoint via the votename and votenote...
CVE-2023-40877
DedeCMS up to 5.7.110 contains an XSS vulnerability in /dede/freelist_edit.php via the title parameter. Affected: DedeCMS versions
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Design/Logic Flaw
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Desdev DedeCMS Code Issue Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
CVE-2023-36298
CVE-2023-36298 : The connected sources identify a file-upload vulnerability in DedeCMS v5.7.109 that can lead to remote code execution (RCE). The records do not specify the root cause details, affected subcomponents, exact exploit vectors, or a published fix/patch version. No in-the-wild exploita...