Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/12/30 1:02 a.m.•35 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS5.8AI score0.00215EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/29 8:15 p.m.•24 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS5.8AI score0.00215EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/29 8:15 p.m.•27 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

8.8CVSS0.00215EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/29 12:00 a.m.•13 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

5.8AI score0.00215EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/29 12:00 a.m.•54 views

CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...

0.00215EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/29 12:00 a.m.•53 views

CVE-2024-30855

The DedeCMS content management system, specifically version v5.7 , is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists within the /src/dede/makehtml_list_action.php endpoint, which could allow a malicious actor to trick a user into performing unintended actions on...

8.8CVSS5.8AI score0.00215EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•28 views

PT-2025-53785

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The software contains a Cross-Site Request Forgery CSRF issue. The vulnerability is located in the /src/dede/makehtml list action.php endpoint. A malicious actor can potentially cause a user to perform unintende...

8.8CVSS6AI score0.00215EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2024/04/30 8:15 p.m.•29 views

CVE-2024-33371

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...

6.1CVSS7.3AI score0.0046EPSS
SaveExploits1References1
Rows per page
Query Builder