CVE-2026-116063

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function requireonce of the file dede/updateguide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could...

CVE-2026-116063

A code injection vulnerability exists in DedeCMS versions up to 5.7.118 . The flaw is located in the require_once function of the dede/update_guide.php file, where manipulation of the vtime argument allows for code injection. This vulnerability enables remote exploitation , and public exploit cod...

EUVD-2026-109566

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function requireonce of the file dede/updateguide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could...

CVE-2026-116063 DedeCMS update_guide.php require_once code injection

A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function requireonce of the file dede/updateguide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could...

cve

cve Vulnerability advisories reported by SDshadow, format...

EUVD-2026-49639

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

EUVD-2026-49640

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

PT-2026-65303

Name of the Vulnerable Software and Affected Versions Dede CMS version 5.7.118 Description A SQL injection issue exists in the sys sql query.php component. A remote attacker can exploit this by sending crafted data to the sqlquery parameter to obtain sensitive information. SQL injection is a...

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

PT-2026-65304

Name of the Vulnerable Software and Affected Versions Dede CMS version 5.7.118 Description A remote attacker can obtain sensitive information through the 'file manage control.php' component by manipulating the str parameter. Recommendations At the moment, there is no information about a newer...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51077

Dede CMS version 5.7.118 contains a SQL injection vulnerability within the sys_sql_query.php component. A remote attacker can exploit this flaw by sending crafted data to the sqlquery parameter to obtain sensitive information from the database. At this time, there is no information regarding a ne...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51077: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-51077

SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information by manipulating the str parameter within the file_manage_control.php component. No information regarding a newer version containing a fix is currently available. To minimize risk, it is recommended to restrict...

CVE-2026-51078: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...