2058 matches found
CVE-2023-52047
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
CVE-2023-52047
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
CVE-2023-52047
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
Cross site request forgery (csrf)
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
DedeCMS Security Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...
CVE-2023-52047
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
CVE-2023-52047
The Dedecms content management system (version v5.7.112 ) contains a Cross-Site Request Forgery (CSRF) vulnerability within the file manager component. This flaw allows an attacker to perform unauthorized actions on the vulnerable system. To remediate this, users are advised to update to a newer ...
CVE-2023-52047
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
PT-2024-14376 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: Dedecms version 5.7.112 Description: A Cross-Site Request Forgery CSRF issue was discovered in the file manager of Dedecms. This issue allows an attacker to perform unauthorized actions on the vulnerable system. Recommendations: For Dedecms...
CVE-2023-52047: Cross-Site Request Forgery (CSRF)
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery CSRF in the file manager...
SQL Injection Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2024-13237)
DedeCMS is the most well-known PHP open source website management system, but also the use of the most users of the PHP class CMS system. Shanghai Zhuozhuo Network Technology Co., Ltd. DedeCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive informatio...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
Design/Logic Flaw
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
PT-2024-19602 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: The issue is related to a File Upload vulnerability. This vulnerability can be exploited via the "uploads/dede/module upload.php" endpoint. Recommendations: For DedeCMS version 5.7.112, consider restrictin...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
CVE-2024-22895
DedeCMS 5.7.112 is affected by a File Upload vulnerability in uploads/dede/module_upload.php. The CVE-2024-22895 entry indicates a high-severity issue (CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 8.8) with network attack vector and low privileges required, no user interaction. Conne...