1696 matches found
CVE-2022-40921
CVE-2022-40921 refers to a vulnerability in DedeCMS v5.7.99 where an arbitrary file upload is possible through the component /dede/file_manage_control.php. The available documents consistently identify the affected product and the vulnerable function but do not detail the exact root cause beyond ...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
CVE-2022-40886 is a file upload vulnerability in Dedecms. Connected sources confirm an arbitrary code execution path via /dede/file_manage_control.php (DedeCMS v5.7.101 noted) and describe it as related to an incomplete fix for this CVE. The initial entry cites DedeCMS 5.7.98 having a background ...
PT-2022-25608 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.98 Description: The issue is related to a file upload vulnerability in the background of the software. Recommendations: For DedeCMS version 5.7.98, at the moment, there is no information about a newer version that contains...
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS 5.7.98 version of the code...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2022-62223)
DedeCMS 织梦内容管理系统 is a PHP-based open source content management system CMS from China's Zhuo Zhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval.A security vulnerability exists in DedeCMS version V5.7.97, which was discovered to...
CVE-2022-36583
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...
CVE-2022-36583
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...
Cross site scripting
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...
CVE-2022-36583
CVE-2022-36583 affects DedeCMS v5.7.97, with multiple cross-site scripting (XSS) vulnerabilities exposed at /dede/co_do.php via the dopost, rpok, and aid parameters. The connected sources corroborate XSS in this exact endpoint, but do not provide detailed exploit chains or affected version ranges...
CVE-2022-36583
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...
DedeCMS 跨站脚本漏洞
DedeCMS 织梦内容管理系统 is a PHP-based open source content management system CMS from China's Zhuo Zhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval.A security vulnerability exists in DedeCMS version V5.7.97, which was discovered to...
PT-2022-23487 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.97 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the /dede/co do.php endpoint via the dopost, rpok, and aid parameters. Recommendations: For DedeCMS...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...
CVE-2022-35516
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php...