237 matches found
PT-2018-10967
Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2 Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new...
CVE-2018-12046: Improper Input Validation
DedeCMS through 5.7SP2 allows arbitrary file write in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file...
SQL Injection Vulnerability in DedeCMS V5.7-SP2 Version
Dream Content Management System DedeCMS is a PHP open source website management system. SQL injection vulnerability exists in DedeCMS V5.7-SP2 version, which can be exploited by attackers to obtain sensitive database information...
CVE-2018-9175: Improper Control of Generation of Code
DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...
CVE-2018-6910
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php...
File Upload Vulnerability in DedeCMS V5.7 SP2
Weaving dream content management system DedeCms is a PHP open source website management system. DedeCMS V5.7 SP2 version of the file upload vulnerability exists, the vulnerability is due to the interface failed to effectively filter the uploaded files, the attacker can use the vulnerability to...
DedeCMS V5.7 SP2 suffers from file upload vulnerability (CNVD-2018-01222)
Weaving dream content management system DedeCms is a PHP open source website management system. DedeCMS V5.7 SP2 version of the dede/tpl.php file file upload vulnerability, an attacker can use the vulnerability to upload script files, can get webshell...
CVE-2017-17727
DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/articleedit.php...
Desdev DedeCMS Arbitrary File Upload Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A security vulnerability exists in...
Dede CMS All Versions SQL Injection Vulnerability
No description provided by source. Dede Cms All Versions Sql Vulnerability Exploit / No Priv8 , Everything is Public Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website:...
Easy business v3. 0 code audit-vulnerability warning-the black bar safety net
A gay in a portal to work..site total person-days..so..let us Diamondback help to look at the dish below, do not spray to initiate a dedicated Just a cursory scan of a few eye..pit... ! Simply wood with a filter media OK.. news\install\index. php. bak this turned out also with a dede..although ba...
Dede CMS - SQL Injection
Dede CMS - SQL Injection Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php ...
Dede CMS - SQL Injection
Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php $ Dorks: inurl:"id"...
Dede CMS SQL Injection
Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php $ Dorks: inurl:"id"...
Dede CMS All Versions SQL Injection Vulnerability
Exploit for php platform in category web applications Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: email protected Software Website: http://www.dedecms.com...
Dede CMS blind SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================== Dede CMS blind SQL Injection Vulnerability ========================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...
