EUVD-2026-49640

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-51077

Dede CMS version 5.7.118 contains a SQL injection vulnerability within the sys_sql_query.php component. A remote attacker can exploit this flaw by sending crafted data to the sqlquery parameter to obtain sensitive information from the database. At this time, there is no information regarding a ne...

PT-2026-65303

Name of the Vulnerable Software and Affected Versions Dede CMS version 5.7.118 Description A SQL injection issue exists in the sys sql query.php component. A remote attacker can exploit this by sending crafted data to the sqlquery parameter to obtain sensitive information. SQL injection is a...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS v.5.7...

Desdev DedeCMS 跨站脚本漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...