1696 matches found
CVE-2024-28672
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/media_edit.php endpoint. Multiple connected sources (Red Hat, CNNVD, PRION, NVD, OpenVAS note) confirm the CSRF issue on DedeCMS v5.7, but the precise root cause, affected parameters, or exploit de...
CVE-2024-28684
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) in the component /dede/module_main.php. The CVE-2024-28684 entry notes an attack that can impact confidentiality, integrity, and availability (CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 8.8). The issue requires user in...
CVE-2024-28665
Summary (CVE-2024-28665) DedeCMS v5.7 is reported to have a Cross-Site Request Forgery (CSRF) vulnerability through the component /dede/article_add.php. The available connected records confirm the affected product and page, but do not provide a confirmed patch version or remediation steps. The CS...
CVE-2024-28666
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/media_add.php component. The CVE-2024-28666 entry confirms a CSRF issue with DedeCMS 5.7, with a CVSS v3.1 base score of 5.5 (Medium) and attack vector Network, requiring user interaction and low privileges...
CVE-2024-28430
CVE-2024-28430 concerns DedeCMS v5.7 and a Cross‑Site Request Forgery (CSRF) flaw in the /dede/catalog_edit.php component. Public descriptions from Red Hat and OpenVAS corroborate a CSRF issue affecting DedeCMS 5.7, with multiple sources noting the vulnerability originates from that specific edit...
CVE-2024-28676
Summary: CVE-2024-28676 affects DedeCMS v5.7 with a cross-site scripting (XSS) flaw exposed via the /dede/article_edit.php endpoint. The vulnerability is characterized as XSS that could impact users interacting with that API path. Several connected advisories confirm the issue but do not provide ...
CVE-2024-28681
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/plus_edit.php endpoint. The issue is documented across multiple sources (NVD, Red Hat, PRION, CNNVD, CVE listing, and OpenVAS) as a CSRF in the DedeCMS 5.7 series; no remote code execution or authe...
CVE-2024-28682
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the /dede/sys_cache_up.php API. The Red Hat and OpenVAS-derived data confirm the CSRF issue, with components referencing DedeCMS 5.7 and the /dede/sys_cache_up.php entry point. PT Security addi...
CVE-2024-28670
Summary: CVE-2024-28670 affects DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) issue on the endpoint /dede/freelist_main.php. The connected documents consistently identify CSRF as the vulnerability class for this product/version; no exploit details are provided in the sources. The impact a...
CVE-2024-28669
DedeCMS v5.7 is reported to be vulnerable to a Cross-Site Request Forgery (CSRF) via the endpoint /dede/freelist_edit.php. The available sources identify the affected software/version and the CSRF issue but do not provide technical details such as exact request parameters, root cause, exploit ste...
CVE-2024-28675
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/diy_edit.php endpoint. The CVE describes CSRF with high impact potential (C, I, A HIGH; CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No exploit details are provided in the primary documents; exp...
CVE-2024-28668
CVE-2024-28668 affects DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) vulnerability in the component /dede/mychannel_add.php. The issue is described across multiple sources as CSRF, with initial metrics indicating CVSS v3.1 base score 6.1 (MEDIUM). No concrete remediation details are provi...
CVE-2024-28667
CVE-2024-28667 concerns DedeCMS v5.7 with a Cross-Site Request Forgery (CSRF) vulnerability in the component /dede/templets_one_edit.php. Evidence across multiple sources consistently identifies the issue as CSRF affecting DedeCMS 5.7, with no public details on exploit vectors in the provided doc...
CVE-2024-28432
DedeCMS v5.7 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability in the /dede/article_edit.php component. The issue enables unauthorized actions to be performed on behalf of an authenticated user, with impact described as high (CVSS 3.1: HIGH for confidentiality, integrity, and avail...
CVE-2024-28429
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/archives_do.php component. The issue allows an attacker to perform unintended actions on behalf of an authenticated user. Exploitation details are not provided in the core CVE description, and multiple conn...
CVE-2024-28431
CVE-2024-28431 affects DedeCMS v5.7, with a CSRF vulnerability in the /dede/catalog_del.php component. The issue is described across multiple sources as Cross-Site Request Forgery, enabling malicious requests without user consent. The available documentation provides the affected software/version...
CVE-2024-28676
DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via /dede/articleedit.php...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...