CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

PT-2023-28756 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability in the backend management interface. This vulnerability allows attackers to create crafted web pages due to a lack of verification of the...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

Desdev DedeCMS Cross-Site Request Forgery Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...

CVE-2023-43275

CVE-2023-43275 describes a CSRF vulnerability in DedeCMS v5.7, affecting the backend administration interface via the /catalog_add.php endpoint due to lack of verification of the submitted form token. The issue allows attackers to craft pages to trigger unintended actions. Exploitation details ar...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

Cross site scripting

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 is affected by a Cross-site Scripting (XSS) issue in the file spec_add.php. The vulnerability is confirmed in multiple sources and is described as an XSS via spec_add.php. CVSS v3.1 base score 5.4 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Low, U...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

DedeCMS Security Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

PT-2023-30690 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 6.2 Description: A Cross-site Scripting XSS issue was found in DedeCMS via the spec add.php file. Recommendations: For DedeCMS version 6.2, update to a newer version that contains a fix for this issue...

Number withdrawn

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system features content publishing, content management, content editing and content retrieval. This CVE number has been withdrawn...

PT-2023-32032 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A critical issue has been found in DedeCMS, affecting an unknown function of the file baidunews.php. The manipulation leads to unrestricted upload. Recommendations: For DedeCMS version 5.7.111, consider...