Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...

CVE-2024-28673

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mychanneledit.php...

CVE-2024-28684

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) in the component /dede/module_main.php. The CVE-2024-28684 entry notes an attack that can impact confidentiality, integrity, and availability (CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 8.8). The issue requires user in...

CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28670

Summary: CVE-2024-28670 affects DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) issue on the endpoint /dede/freelist_main.php. The connected documents consistently identify CSRF as the vulnerability class for this product/version; no exploit details are provided in the sources. The impact a...

CVE-2024-28672

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/media_edit.php endpoint. Multiple connected sources (Red Hat, CNNVD, PRION, NVD, OpenVAS note) confirm the CSRF issue on DedeCMS v5.7, but the precise root cause, affected parameters, or exploit de...

CVE-2024-28668

CVE-2024-28668 affects DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) vulnerability in the component /dede/mychannel_add.php. The issue is described across multiple sources as CSRF, with initial metrics indicating CVSS v3.1 base score 6.1 (MEDIUM). No concrete remediation details are provi...

CVE-2024-28681

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/plus_edit.php endpoint. The issue is documented across multiple sources (NVD, Red Hat, PRION, CNNVD, CVE listing, and OpenVAS) as a CSRF in the DedeCMS 5.7 series; no remote code execution or authe...

CVE-2024-28680

DedeCMS v5.7 contains a CSRF vulnerability in the /dede/diy_add.php endpoint. The issue enables cross-site request forgery, potentially allowing an attacker to perform state-changing actions on behalf of an authenticated user. The available sources consistently identify DedeCMS v5.7 as affected; ...

CVE-2024-28429

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/archives_do.php component. The issue allows an attacker to perform unintended actions on behalf of an authenticated user. Exploitation details are not provided in the core CVE description, and multiple conn...

CVE-2024-28682

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the /dede/sys_cache_up.php API. The Red Hat and OpenVAS-derived data confirm the CSRF issue, with components referencing DedeCMS 5.7 and the /dede/sys_cache_up.php entry point. PT Security addi...

CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...

PT-2024-22526 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the component /dede/module main.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the /dede/module...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...

CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...

CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...