1715 matches found
CVE-2020-36494
CVE-2020-36494 : Affects DedeCMS v7.5 SP2. The component involved is mychannel_edit.php, with multiple cross-site scripting (XSS) vulnerabilities exploitable via the parameters filename, mid, userid, and templet. The connected documents reiterate the same description but do not provide explicit e...
CVE-2020-36493
DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the media_main.php component, exploitable via the activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum parameters. The connected sources confirm XSS in this specific version but do not provide exp...
CVE-2020-36493
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mediamain.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
CVE-2020-36494
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component mychanneledit.php via the filename, mid, userid, and templet' parameters...
CVE-2020-36495
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...
CVE-2020-36495
DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php . The issue is triggered via input params filename , mid , userid , and templet’ . Exploitation details (payloads, exploit vectors, or in‑the‑wild activity) are not provided in the ...
CVE-2020-36496
CVE-2020-36496 concerns DedeCMS v7.5 SP2. The connected documents describe multiple cross-site scripting (XSS) vulnerabilities in the component file sys_admin_user_edit.php, exploitable via the parameters filename , mid , userid , and templet . These entries consistently attribute the issue to XS...
CVE-2020-36496
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component sysadminuseredit.php via the filename, mid, userid, and templet' parameters...
CVE-2020-36497
DedeCMS v7.5 SP2 contains multiple XSS vulnerabilities in the makehtml_homepage.php component, exploitable via the filename, mid, userid, and templet parameters. The CVE-2020-36497 entries across NVD/Red Hat/CNVD/CVE record confirm cross-site scripting weaknesses in this version. The connected so...
CVE-2020-36497
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component makehtmlhomepage.php via the filename, mid, userid, and templet' parameters...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...
DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...
Desdev DedeCMS 跨站脚本漏洞
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
SRC-2021-0029 : Dedecms GetCookie Type Juggling Authentication Bypass Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to bypass authentication on affected installations of Dedecms. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetCookie function. The issue results from a loose comparison check wh...
DedeCMS has an unauthorized command execution vulnerability
DedeCMS is a PHP web management system developed by Dreamweaver.DedeCMS has an unauthorized command execution vulnerability that can be exploited by attackers to cause command execution...
SRC-2021-0022 : Dedecms ShowMsg Template Injection Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dedecms. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the rendering templates. The issue results from the lac...
