File Upload Vulnerability in DedeCMS v5.7

DedeCMS is a web content management system. A file upload vulnerability exists in DedeCMS v5.7, which can be exploited by attackers to gain server privileges...

Command Execution Vulnerability in DedeCMS V5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS V5.7, which can be exploited by an attacker to gain server privileges...

Dedecms backend has arbitrary file reading vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. Dedecms backend exists arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

Command Execution Vulnerability in DedeCMS

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS. An attacker can exploit this vulnerability to execute arbitrary commands and obtain server control privileges...

DedeCMS v5.7 has xss vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. An xss vulnerability exists in DedeCMS v5.7, which can be exploited by attackers to obtain an administrator cookie...

Command Execution Vulnerability in DedeCMS v5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS v5.7, which can be exploited by an attacker to gain server privileges...

Command Execution Vulnerability in Dedecms

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in Dedecms. Allows attackers to remotely execute commands and gain server privileges...

Code execution vulnerability in DedeCMS backend (CNVD-2019-12784)

Dream Content Management System DedeCMS is a PHP open source website management system. A code execution vulnerability exists in the backend of DedeCMS, which can be exploited by attackers to gain control of the web server...

File upload vulnerability in DedeCMS al***_ed***.php file

Dream Content Management System DedeCMS is a PHP open source website management system. A file upload vulnerability exists in the DedeCMS aled.php file. Allows an attacker to upload a webshell and gain server privileges...

The existence of arbitrary file deletion vulnerability dedecms

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. dedecms there are arbitrary file deletion...

Desdev DedeCMS Arbitrary Password Reset Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...

CVE-2019-10014

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

CVE-2019-10014

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

Design/Logic Flaw

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

CVE-2019-10014

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

CVE-2019-10014

CVE-2019-10014 affects DedeCMS 5.7SP2. The vulnerability is in member/resetpassword.php, where remote authenticated users can reset the passwords of arbitrary users by modifying the id parameter because the key parameter is not properly validated. This allows unauthorized password resets within t...

There is an information leakage vulnerability in dedecms

Dream Content Management System DedeCMS is a PHP open source website management system. DedeCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

DedeCMS V5.7 Arbitrary File Deletion Vulnerability

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. DedeCMS V5.7 arbitrary file deletion...

File Upload Vulnerability in DedeCMS V5.7

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. DedeCMS V5.7 file upload vulnerability, a...

File upload vulnerability in DedeCMS fi***_cl***.php file

Dream Content Management System DedeCMS is a PHP open source website management system. A file upload vulnerability exists in the DedeCMS ficl.php file. Allows an attacker to upload a webshell and gain server privileges...