CVE-2024-6940

CVE-2024-6940 refers to a code-injection vulnerability in DedeCMS 5.7.114, affecting the file article_template_rand.php. The issue allows remote code execution via crafted input; exploitation has been publicly disclosed and observed in multiple sources. The available documents confirm the vulnera...

CVE-2024-35375

CVE-2024-35375 affects DedeCMS 5.7.114 backend and its mediaadd.php page, where an arbitrary file upload vulnerability exists in the media add functionality. The connected sources do not provide a confirmed fix or patched version. Root cause details are not explicitly described beyond the upload ...

CVE-2024-4790

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sysverifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate...