CVE-2024-28672

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/media_edit.php endpoint. An attacker could potentially perform unauthorized actions via this endpoint if a victim with sufficient privileges interacts with a malicious link. As a temporary workaro...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

CVE-2024-28429

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...

CVE-2024-28681

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/plus_edit.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim into making unintended requests. As a temporary workaround, it is recommended to restr...

CVE-2024-28429: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...

CVE-2024-28668: Server-Side Request Forgery (SSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-28684: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

CVE-2024-28684

The DedeCMS v5.7 content management system contains a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/module_main.php component. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. As a temporary workaround until a patch i...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28666

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...

CVE-2024-28679

DedeCMS v5.7 is vulnerable to a cross-site scripting (XSS) attack within the Photo Collection feature. This flaw allows for the potential execution of malicious scripts in the user's browser. As a temporary workaround, it is recommended to disable the Photo Collection feature until a patch is rel...

CVE-2024-28679: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

PT-2024-22520 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the Photo Collection feature. This allows for potential malicious script execution. Recommendations: For DedeCMS version 5.7, as a temporary workaround...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28677

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability involving the /dede/article_keywords_main.php endpoint. This flaw allows an attacker to potentially perform unauthorized actions on behalf of a logged-in user. As of the provided documentation, there is no informatio...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...