CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleadd.php...

PT-2024-22507 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/media add.php component. This allows an attacker to perform unintended actions on the web application. Recommendations: For DedeCMS version 5.7, a...

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

PT-2024-22524 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability can be exploited via the /dede/sys cache up.php API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...

PT-2024-22520 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the Photo Collection feature. This allows for potential malicious script execution. Recommendations: For DedeCMS version 5.7, as a temporary workaround...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28682

DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the /dede/sys_cache_up.php API. The Red Hat and OpenVAS-derived data confirm the CSRF issue, with components referencing DedeCMS 5.7 and the /dede/sys_cache_up.php entry point. PT Security addi...

PT-2024-22522 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability can be exploited via the "/dede/diy add.php" API endpoint. Recommendations: For DedeCMS version 5.7, update to a version that...

CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

Cross site request forgery (csrf)

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...

DedeCMS Security Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

CVE-2023-52047

Dedecms v5.7.112 contains a Cross-Site Request Forgery (CSRF) vulnerability in the file manager. The CVE-2023-52047 entry has a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The issue is rooted in CSRF, enabling an attacker to perform unauthorized actions on behalf of an auth...