CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28432

DedeCMS v5.7 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability in the /dede/article_edit.php component. The issue enables unauthorized actions to be performed on behalf of an authenticated user, with impact described as high (CVSS 3.1: HIGH for confidentiality, integrity, and avail...

CVE-2024-28430

CVE-2024-28430 concerns DedeCMS v5.7 and a Cross‑Site Request Forgery (CSRF) flaw in the /dede/catalog_edit.php component. Public descriptions from Red Hat and OpenVAS corroborate a CSRF issue affecting DedeCMS 5.7, with multiple sources noting the vulnerability originates from that specific edit...

CVE-2024-28679

CVE-2024-28679 : DedeCMS v5.7 contains a cross-site scripting (XSS) vulnerability via the Photo Collection feature. The issue affects DedeCMS 5.7 (Photo Collection component) and is described as an XSS leading to script execution, with the CVSS base metrics indicating a Medium severity (6.1) and ...

CVE-2024-28676

Summary: CVE-2024-28676 affects DedeCMS v5.7 with a cross-site scripting (XSS) flaw exposed via the /dede/article_edit.php endpoint. The vulnerability is characterized as XSS that could impact users interacting with that API path. Several connected advisories confirm the issue but do not provide ...

CVE-2024-28671

CVE-2024-28671 affects DedeCMS v5.7 with a CSRF vulnerability exploitable via /dede/stepselect_main.php. Root cause: cross-site request forgery leading to unauthorized state-changing actions. CVSSv3.1 base score 8.8 (HIGH) with Network attack vector, low attack complexity, no privileges required ...

CVE-2024-28683

DedeCMS v5.7 is affected by a cross-site scripting (XSS) vulnerability via the create file feature. Multiple connected sources confirm the issue in DedeCMS v5.7 (including references to SP2 in OpenVAS) and describe the root cause as an XSS exposed by file-creation tooling. Practical impact stated...

CVE-2024-28667

CVE-2024-28667 concerns DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) vulnerability in the component /dede/templets_one_edit.php. Evidence across multiple sources consistently identifies the issue as CSRF affecting DedeCMS 5.7, with no public details on exploit vectors in the provided doc...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

PT-2024-22526 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the component /dede/module main.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the /dede/module...

PT-2024-22525 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the create file functionality. This allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized access or...

PT-2024-22510 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability is exploited via the "/dede/freelist edit.php" endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

PT-2024-22517 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is related to the /dede/article edit.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting...

PT-2024-22520 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the Photo Collection feature. This allows for potential malicious script execution. Recommendations: For DedeCMS version 5.7, as a temporary workaround...

PT-2024-22522 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability can be exploited via the "/dede/diy add.php" API endpoint. Recommendations: For DedeCMS version 5.7, update to a version that...