1703 matches found
Design/Logic Flaw
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
Desdev DedeCMS 跨站脚本漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...
PT-2023-23451 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to 5.7.108 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to a flaw in the sys info.php file, specifically through the parameters edit cfg powerby and edit c...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to version 5.7.108 is vulnerable to cross-site scripting (XSS) in sys_info.php via the parameters edit___cfg_powerby and edit___cfg_beian. The underlying issue is an XSS flaw in how these query/POST parameters are processed, enabling attacker-supplied HTML/JS to be reflected in the adm...
Shanghai Zhuozhuo Network Technology Co., Ltd. DedeCMS file containment vulnerability
DedeCMS is a PHP open source website management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS file contains a vulnerability that can be exploited by attackers to execute commands...
Shanghai Zhuozhuo Network Technology Co., Ltd. DedeCMS file containment vulnerability
DedeCMS is a PHP open source website management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS file contains a vulnerability that can be exploited by attackers to execute commands...
CVE-2023-2424
A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...
Out-of-bounds
A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...
CVE-2023-2424 DedeCMS config.php UpDateMemberModCache unrestricted upload
A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the publi...
CVE-2023-2424
CVE-2023-2424 affects DedeCMS 5.7.106. The vulnerability stems from the UpDateMemberModCache function in uploads/dede/config.php, which allows unrestricted file uploads due to the underlying issue described in multiple sources. The flaw can be exploited remotely, and public disclosures exist. Con...
PT-2023-19494 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.106 Description: A critical issue was found, affecting the UpDateMemberModCache function of the file uploads/dede/config.php. This issue leads to unrestricted upload and can be exploited remotely. Recommendations: For...
DedeCMS <= 5.7.107 Multiple Vulnerabilities
DedeCMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dedecms:dedecms"; if description...
CVE-2023-30380
An issue in the component /dialog/selectmedia.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal...
CVE-2023-30380
An issue in the component /dialog/selectmedia.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal...
Directory traversal
An issue in the component /dialog/selectmedia.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal...
CVE-2023-30380
CVE-2023-30380 affects DedeCMS v5.7.107, specifically the /dialog/select_media.php component, enabling a directory traversal vulnerability. Public sources consistently describe the impact as attackers able to read arbitrary files on the server. Several connected documents corroborate this, includ...
Desdev DedeCMS 路径遍历漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in Desdev...