CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375: Unrestricted Upload of File with Dangerous Type

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

Desdev DedeCMS security vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

PT-2024-26468 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.114 Description: The issue concerns an arbitrary file upload vulnerability located on the media add .php page in the backend of the website. Recommendations: For version 5.7.114, consider restricting access to the media ad...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS version V5.7.113 is vulnerable to Cross-Site Scripting (XSS) . The vulnerability originates from the sys_data_replace.php file, where improper neutralization of input during web page generation allows for the execution of malicious scripts. The impact includes a Medium base severity (CVSS...

CVE-2024-34959: Improper Neutralization of Input During Web Page Generation

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

DedeCMS security vulnerabilities

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

PT-2024-26273 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.113 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the sys data replace.php file. Recommendations: For DedeCMS version 5.7.113, at the moment, there is no information about a newer...

CVE-2024-4790

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sysverifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate...

CVE-2024-4790

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sysverifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate...

CVE-2024-34245

An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtmljsaction.php...

Desdev DedeCMS security vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

CVE-2024-4790: Path Traversal: '../filedir'

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sysverifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate...

CVE-2024-34245: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtmljsaction.php...