CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2020-16632

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

Cross site request forgery (csrf)

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

Cross site scripting

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

CVE-2020-16632

CVE-2020-16632 is an XSS vulnerability in DedeCMS 5.7 SP2, described across multiple sources as allowing an authenticated user to execute remote arbitrary code via the keyword parameter in /uploads/dede/action_search.php. The connected documents confirm the affected software and the underlying is...

CVE-2020-16632

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2021-32073

CVE-2021-32073 affects DedeCMS v5.7 SP2. A CSRF vulnerability in the web manager allows a remote attacker to craft a malicious request that results in remote code execution. Exploitation details are not provided in the initial documents beyond the CSRF and RCE outcome. The related sources (RH Red...

DedeCMS 跨站脚本漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery...

DedeCMS suffers from SQL injection vulnerability (CNVD-2021-23369)

DedeCMS is a versatile tool that allows for comprehensive management of various sections on a website. DedeCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19725)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19724)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in DedeCMS Editor

The popular domestic content management system CMS multi-terminal all-media solution, DedeCMSV6 system is based on PHP7.X development, highly scalable and fully open source. A file upload vulnerability exists in the DedeCMS editor, which can be exploited by attackers to upload malicious code and...

dedecmscan

This is a Python script for a web application vulnerability scanner, specifically targeting DedeCMS versions. The script is designed to identify various vulnerabilities in the application, including SQL injection, cross-site scripting XSS, and other potential issues. The script consists of severa...

DEDECMSV6 backend di***_li***.php file has SQL injection vulnerability

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A SQL injection vulnerability exists in the DEDECMSV6 backend dili.php file. An attacker can exploit this vulnerability to obtain sensitive information from the database...

DedeCMS v.5.8 - _keyword_ Cross-Site Scripting

Exploit Title: DedeCMS v.5.8 - "keyword" Cross-Site Scripting Date: 2020-07-27 Exploit Author: Noth Vendor Homepage: https://github.com/dedetech/DedeCMSv5 Software Link: https://github.com/dedetech/DedeCMSv5 Version: v.5.8 CVE : CVE-2020-27533 A Cross Site Scripting XSS issue was discovered in th...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...