Design/Logic Flaw

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...

CVE-2024-22895: Unrestricted Upload of File with Dangerous Type

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

CVE-2024-22895

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...

CVE-2023-40784

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/modulemake.php...

CVE-2023-40784: Unrestricted Upload of File with Dangerous Type

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/modulemake.php...

CVE-2023-40784

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/modulemake.php...

CVE-2023-2928

A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/articleallowurledit.php. The manipulation of the argument allurls leads to code injection. The attack can be launched remotely...

CVE-2020-18114

An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format...

PT-2021-10130

Name of the Vulnerable Software and Affected Versions: DedeCMS version V5.7SP2 Description: An arbitrary file upload vulnerability in the "/uploads/dede" component allows attackers to upload a webshell in HTM format. Recommendations: For DedeCMS version V5.7SP2, consider disabling the...

CVE-2020-18114: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format...

Desdev DedeCMS 代码问题漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...

PT-2021-9873

Name of the Vulnerable Software and Affected Versions DedeCMS version V5.7 SP2 Description A XSS issue in the "/uploads/dede/action search.php" endpoint allows an authenticated user to execute remote arbitrary code via the keyword parameter. Recommendations For DedeCMS version V5.7 SP2, as a...

CVE-2018-9175: Improper Control of Generation of Code

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...