CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11138 DedeCMS friendlink_add.php unrestricted upload

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11138 DedeCMS friendlink_add.php unrestricted upload

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11138

CVE-2024-11138 affects DedeCMS 5.7.116. The issue is in /dede/uploads/dede/friendlink_add.php where manipulating the logoimg argument allows unrestricted file uploads, enabling remote access potentially leading to remote code execution. Exploitation has been disclosed publicly per sources, indica...

PT-2024-16783 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A vulnerability has been found in DedeCMS, affecting the file /dede/uploads/dede/friendlink add.php. The manipulation of the logoimg argument leads to unrestricted upload. It is possible to initiate the...

DedeCMS Command Injection Vulnerability

DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS has a command injection vulnerability that stems from the articlestringmix.php...

CVE-2024-9076

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/articlestringmix.php. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-9076

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/articlestringmix.php. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-9076 DedeCMS article_string_mix.php os command injection

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/articlestringmix.php. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-9076 DedeCMS article_string_mix.php os command injection

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/articlestringmix.php. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-9076

CVE-2024-9076 (DedeCMS) affects DedeCMS versions up to 5.7.115. The vulnerability is a command-injection in the article_string_mix.php (or similar) processing path, enabling remote execution due to improper handling of command input. Public exploits/poC are noted, and vendor contact was ineffecti...

DesDev DedeCMS 命令注入漏洞

DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS has a command injection vulnerability that stems from the articlestringmix.php...

PT-2024-39410 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to 5.7.115 Description: A critical issue affects some unknown processing of the file article string mix.php, leading to os command injection. The attack may be initiated remotely. The vendor was contacted early about this...

VulnCheck KEV: CVE-2017-17731

DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php...

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms DedeCMS V5.7.115 is affected by a backend file upload vulnerability that enables arbitrary code execution. The issue stems from a backend file upload path that can be abused to execute uploaded code, enabling an attacker to run commands with the system’s privileges. The documentation cons...