CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28669: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28672: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-28667: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

PT-2024-22509 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/mychannel add.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the...

CVE-2024-28665

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_add.php component. This flaw allows an attacker to perform unintended actions on the website. As of the current documentation, no patch is available; however, it is recommended to restrict ac...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...

CVE-2024-28683

DedeCMS v5.7 contains a cross-site scripting (XSS) vulnerability triggered through the create file functionality. This flaw allows an attacker to inject malicious scripts into the website, which could potentially lead to unauthorized access or control. No specific patch version is currently ident...

PT-2024-22520 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the Photo Collection feature. This allows for potential malicious script execution. Recommendations: For DedeCMS version 5.7, as a temporary workaround...

CVE-2024-28679: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

CVE-2024-28672

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/media_edit.php endpoint. An attacker could potentially perform unauthorized actions via this endpoint if a victim with sufficient privileges interacts with a malicious link. As a temporary workaro...

CVE-2024-28679

DedeCMS v5.7 is vulnerable to a cross-site scripting (XSS) attack within the Photo Collection feature. This flaw allows for the potential execution of malicious scripts in the user's browser. As a temporary workaround, it is recommended to disable the Photo Collection feature until a patch is rel...

CVE-2024-28675

DedeCMS v5.7 , a PHP-based content management system by Desdev, contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /dede/diy_edit.php API endpoint, which allows an attacker to perform unauthorized actions via a forged request. Exploitation details are not provided ...

CVE-2024-28669

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/freelist_edit.php endpoint. This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. As a temporary workaround, users are recommended to restrict access to this spec...