Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

CVE-2024-33401

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...

CVE-2024-33401

CVE-2024-33401 is a Cross-Site Scripting vulnerability in DedeCMS v5.7.113 where an attacker can exploit the mnum parameter to execute arbitrary code remotely. The connected documents consistently describe this vulnerability as XSS that permits code execution, but none provide a remediation or pa...

PT-2024-25233

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.113 Description The issue allows a remote attacker to run arbitrary code via the mnum parameter, which is related to a Cross Site Scripting vulnerability. Recommendations For DedeCMS version 5.7.113, consider restricting...

CVE-2024-33401

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

CVE-2024-33401

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...

CVE-2024-29660

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselectmain.php component...

CVE-2024-29660

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselectmain.php component...

CVE-2024-29660

CVE-2024-29660 describes a cross-site scripting vulnerability in DedeCMS v5.7 affecting the stepselect_main.php component. The provided documents consistently indicate that a local attacker can leverage a crafted payload to execute arbitrary code, implying a high-privilege impact on affected syst...

CVE-2024-29660

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselectmain.php component...

CVE-2024-29660

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselectmain.php component...

PT-2024-22953 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code by sending a crafted payload to the "stepselect main.php" component. Recommendations: For DedeCMS version 5.7, at the moment, ther...

CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload...

CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload...

CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload...

CVE-2024-29661

CVE-2024-29661 describes a file-upload vulnerability in DedeCMS v5.7 that allows a local attacker to execute arbitrary code via a crafted payload. The vulnerability is consistently reported across multiple sources (Red Hat, NVD, CNNVD, CVE list). The NVD entry lists a high-impact scenario (C:H/I:...

CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload...

PT-2024-22954 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A File Upload issue allows a local attacker to execute arbitrary code via a crafted payload. Recommendations: For DedeCMS version 5.7, update to a version that fixes this issue, if available, or consider...

CVE-2024-3686

A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateguide.php. The manipulation of the argument files leads to path traversal: '../filedir'. The attack can be launched remotely. The...