2071 matches found
CVE-2025-15004
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004 DedeCMS freelist_main.php sql injection
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
EUVD-2025-204680
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004
CVE-2025-15004 affects DedeCMS up to 5.7.118. The vulnerability is a SQL injection in the file /freelist_main.php caused by manipulating the orderby parameter, which can be exploited remotely. Public exploit code exists and is referenced across multiple feeds (e.g., PT-2025-52615, CNNVD, NVD). Re...
CVE-2025-15004: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
PT-2025-52615
Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.118 Description A flaw exists in DedeCMS that allows for SQL injection. The issue is due to the manipulation of the orderby argument in the /freelist main.php file. This can be exploited remotely. The exploit is...
DesDev DedeCMS SQL Injection Vulnerability
DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has features such as content publishing, content management, content editing and content retrieval. A SQL injection vulnerability exists in DesDev...
EUVD-2018-4028
Malware in sbrugna...
EUVD-2018-8584
Malware in sbrugna...
EUVD-2018-10776
Malware in sbrugna...
EUVD-2020-23976
Malware in sbrugna...
EUVD-2021-18935
Malware in sbrugna...
EUVD-2020-23980
Malware in sbrugna...
EUVD-2018-8586
Malware in sbrugna...
EUVD-2020-23983
Malware in sbrugna...
EUVD-2019-15854
Malware in sbrugna...
EUVD-2017-8882
Malware in sbrugna...