CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

PT-2024-31973 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.115 Description: The issue is related to Cross Site Scripting XSS via the advertisement code box in the advertisement management module. This allows for potential malicious script execution. Recommendations: For DedeCMS...

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

DesDev DedeCMS Cross-Site Scripting Vulnerability

DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in DesDev DedeCMS...

CVE-2024-46373: Unrestricted Upload of File with Dangerous Type

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

PT-2024-31974

Name of the Vulnerable Software and Affected Versions Dedecms version 5.7.115 Description The issue is related to an arbitrary code execution via file upload vulnerability in the backend. Recommendations For Dedecms version 5.7.115, as a temporary workaround, consider disabling file uploads in th...

CVE-2024-46373

Dedecms V5.7.115 , a PHP-based open-source content management system from DesDev (Zhuozhuo), is vulnerable to arbitrary code execution . The flaw originates from a file upload vulnerability in the backend, which may allow an attacker to upload and execute malicious files. While the specific techn...

CVE-2024-46372

CVE-2024-46372 affects DedeCMS 5.7.115. Vulnerability: Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. Impact described as potential malicious script execution; no patch/version fix details provided. Mitigations/recommendations from PTSecurity sug...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636: Improper Neutralization of Special Elements used in a Command

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS (Dream Weaving Content Management System) version V5.7.115 is susceptible to a command execution vulnerability. The root cause is the improper neutralization of special elements used in a command, accessible via the file_manage_view.php?fmdo=newfile&activepath endpoint. This flaw could al...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

PT-2024-30086

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.115 Description DedeCMS has a command execution vulnerability via the "file manage view.php" endpoint with parameters fmdo=newfile and activepath. This issue allows for command execution. No information is provided about th...

DesDev DedeCMS security vulnerability

DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Dedev Network DesDev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DesDev DedeCMS...

DedeCMS Code Injection Vulnerability (CNVD-2024-33894)

DedeCMS is a popular content management system widely used to create and manage website content for a variety of application scenarios such as corporate websites and personal blogs. A code injection vulnerability exists in the articletemplaterand.php file in DedeCMS version 5.7.114. The...