1697 matches found
CVE-2018-16786
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
Design/Logic Flaw
DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "file type='file' name='../" substring...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
CVE-2018-16784
DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "file type='file' name='../" substring...
CVE-2018-16784
DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "file type='file' name='../" substring...
CVE-2018-16784
CVE-2018-16784 concerns DedeCMS 5.7 SP2, where an XML injection allows remote code execution via a crafted substring "<file type='file' name='../". The connected documents provide the vulnerability description and NVD metrics, indicating network access with low complexity and partial to high i...
CVE-2018-16786
CVE-2018-16786 concerns DedeCMS 5.7 SP2, where a Cross-Site Scripting (XSS) flaw exists in the /plus/feedback_ajax.php file. The vulnerability is triggered via an onhashchange attribute in the msg parameter, allowing arbitrary JavaScript execution in the context of the affected user. The availabl...
CVE-2018-16786
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
DedeCMS File Write Vulnerability
DedeCMS is a PHP-based web content management system CMS. A file write vulnerability exists in files in DedeCMS version 5.7 SP2, which can be exploited by an attacker to create a script file and obtain a webshell...
File Upload Vulnerability in DedeCMS v5.7 SP2
Dream Content Management System DedeCMS is a PHP open source website management system. A file upload vulnerability exists in DedeCMS v5.7 SP2. Attackers can exploit the vulnerability to upload image Trojans and gain server privileges...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
Design/Logic Flaw
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
CVE-2018-16785
XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell...
CVE-2018-16785
The connected sources confirm a concrete vulnerability in DedeCMS v5.7 SP2 (PHP-based CMS): a file-write flaw that attackers can exploit to write a script file and obtain a webshell. This CVE (CVE-2018-16785) is described as affecting DedeCMS 5.7 SP2 with XML injection/file-write mechanics enabli...
SQL Injection Vulnerability in DedeCMS
DedeCMS is a web content management system based on PHP+MySQL technology that supports multiple server platforms. A SQL injection vulnerability exists in DedeCMS v5.7 SP2, which can be exploited by attackers to obtain sensitive database information...
SQL injection vulnerability in DedeCMS V5.7-SP2 ta***.php page
Weaving dream content management system DedeCms is a PHP open source website management system. A SQL injection vulnerability exists in the DedeCMS V5.7-SP2 ta.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
Note DedeCMS a hash length of the expanding attacks caused by unauthorized vulnerability-vulnerability warning-the black bar safety net
Vulnerability impact: Dedecmsweaving dreams CMS V5. 7. 72 the official version of the 20180109 latest version The vulnerability principle DedeCMS user authentication by the authentication Cookie in the DedeUserID and DedeUserIDckMd5 carried out, as follows: ! Where$cfgcookieencode is installed wh...
CVE-2018-12046
DedeCMS through 5.7SP2 allows arbitrary file write in dede/filemanagecontrol.php via a dede/filemanageview.php?fmdo=newfile request with name and str parameters, as demonstrated by writing to a new .php file...