Cross site scripting

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

CVE-2020-27533

CVE-2020-27533 concerns an XSS in DedeCMS v5.8, specifically in the search feature. The available connected documents identify the affected component as the search functionality (action_search.php) and confirm a cross-site scripting vulnerability that allows injected script to be executed by othe...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2020-49415)

DedeCMS is an open source content management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS has a code execution vulnerability that can be exploited by attackers to gain server control privileges...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

DedeCMS suffers from SQL injection vulnerability (CNVD-2020-41331)

DedeCMS is a web content management system. DedeCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vendor Link: http://www.dedecms.com Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web...

DedeCMS 7.5 SP2 Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID:...

DedeCMS 7.5 SP2 Persistent Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-09 Vulnerability Laboratory ID VL-ID: ===================================...

DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID: ===================================...

DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-07 Vulnerability Laboratory ID VL-ID: ===================================...

XSS Vulnerability in DedeCMS 5.7SP2

DedeCMS is a collection of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7SP2 exists XSS vulnerability, attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

dedecmscan

This is a Python script designed to scan for vulnerabilities in DedeCMS, a content management system. The script is called "dedescan" and is written in Python 3. It uses various modules to perform different types of scans, including SQL injection, cross-site scripting XSS, and path traversal. The...

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

Unrestricted file upload

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

CVE-2015-4553

DeDeCMS

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

DedeCMS backend has SQL injection vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the backend of DedeCMS. The vulnerability stems from the lack of validation of externally entered SQL statements in the database-based application, which can be exploite...

Stored cross-site scripting vulnerability in DedeCMS ed***_sp***_in***.php page

Dream Content Management System DedeCMS is a PHP open source website management system. A stored cross-site scripting vulnerability exists in the DedeCMS edspin.php page. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...