CVE-2018-16784

DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "file type='file' name='../" substring...

CVE-2018-12045

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=upload request with an upfile1 parameter, as demonstrated by uploading a .php file...

SQL Injection Vulnerability in DedeCMS V5.7-SP2 Version

Dream Content Management System DedeCMS is a PHP open source website management system. SQL injection vulnerability exists in DedeCMS V5.7-SP2 version, which can be exploited by attackers to obtain sensitive database information...

CVE-2018-6910

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php...

File Upload Vulnerability in DedeCMS V5.7 SP2

Weaving dream content management system DedeCms is a PHP open source website management system. DedeCMS V5.7 SP2 version of the file upload vulnerability exists, the vulnerability is due to the interface failed to effectively filter the uploaded files, the attacker can use the vulnerability to...

CVE-2017-17727

DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/articleedit.php...

Dede CMS All Versions SQL Injection Vulnerability

No description provided by source. Dede Cms All Versions Sql Vulnerability Exploit / No Priv8 , Everything is Public Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website:...

Dede CMS - SQL Injection

Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php $ Dorks: inurl:"id"...

Dede CMS - SQL Injection

Dede CMS - SQL Injection Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php ...

Dede CMS SQL Injection

Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php $ Dorks: inurl:"id"...

Dede CMS All Versions SQL Injection Vulnerability

Exploit for php platform in category web applications Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: email protected Software Website: http://www.dedecms.com...

Dede CMS blind SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== Dede CMS blind SQL Injection Vulnerability ========================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...