Lucene search
+L

127 matches found

CNNVD
CNNVD
added 2024/05/14 12:0 a.m.4 views

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

6.5CVSS6.3AI score0.00818EPSS
SaveExploits1References3
OSV
OSV
added 2024/05/07 2:15 p.m.7 views

CVE-2024-4593

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sysmultiserv.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the...

4.3CVSS4.9AI score0.00428EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/07 12:15 p.m.2 views

CVE-2024-4585

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/membertype.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

4.3CVSS4.9AI score0.00428EPSS
SaveExploits1References4
NVD
NVD
added 2024/05/07 12:15 p.m.24 views

CVE-2024-4585

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/membertype.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

5CVSS4.8AI score0.00428EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.6 views

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

5CVSS5AI score0.00428EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.6 views

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

5CVSS5AI score0.0042EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.6 views

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

5CVSS5AI score0.0042EPSS
SaveExploits1References5
OSV
OSV
added 2024/04/29 10:15 p.m.5 views

CVE-2024-33401

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...

4.4CVSS6AI score0.00245EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/25 12:0 a.m.8 views

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS v.5.7...

5.3CVSS6.1AI score0.00232EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/02 2:15 a.m.5 views

CVE-2024-3146

A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/makehtmlrssaction.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

4.3CVSS4.8AI score0.00412EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/02 1:15 a.m.5 views

CVE-2024-3143

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/memberrank.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

4.3CVSS4.7AI score0.00388EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/02 12:0 a.m.20 views

CVE-2024-30946

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/codo.php...

7.5AI score0.00178EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/04/02 12:0 a.m.7 views

PT-2024-24071 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic issue has been found, affecting an unknown function of the file /src/dede/member rank.php. This issue leads to cross-site request forgery and can be exploited remotely. Recommendations: For DedeC...

5CVSS4.9AI score0.00388EPSS
SaveExploits1References6
OSV
OSV
added 2024/03/26 2:15 p.m.7 views

CVE-2024-29684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF via the component /src/dede/makehtmlhomepage.php allowing a remote attacker to execute arbitrary code...

9.8CVSS6AI score0.00571EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.5 views

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

9.8CVSS6.6AI score0.00571EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/13 4:15 p.m.5 views

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

6.3CVSS5.8AI score0.00233EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/13 4:15 p.m.4 views

CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

6.1CVSS6.6AI score0.00482EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/13 4:15 p.m.7 views

CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

6.1CVSS5.7AI score0.00472EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/13 4:15 p.m.6 views

CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...

8.8CVSS5.8AI score0.00876EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/13 1:15 p.m.3 views

CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...

6.1CVSS6.5AI score0.00383EPSS
SaveExploits1References1
Rows per page
Query Builder