1703 matches found
DedeCMS Command Injection (CVE-2022-34531)
A command injection vulnerability exists in DedeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
Privilege escalation
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40921
CVE-2022-40921 refers to a vulnerability in DedeCMS v5.7.99 where an arbitrary file upload is possible through the component /dede/file_manage_control.php. The available documents consistently identify the affected product and the vulnerable function but do not detail the exact root cause beyond ...
PT-2022-25619 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.99 Description: The issue allows for an arbitrary file upload via the component /dede/file manage control.php. Recommendations: For DedeCMS version 5.7.99, at the moment, there is no information about a newer version that...
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS V5.7.99 version of a security...
CVE-2022-40921
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/filemanagecontrol.php...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
CVE-2022-40886
CVE-2022-40886 is a file upload vulnerability in Dedecms. Connected sources confirm an arbitrary code execution path via /dede/file_manage_control.php (DedeCMS v5.7.101 noted) and describe it as related to an incomplete fix for this CVE. The initial entry cites DedeCMS 5.7.98 having a background ...
CVE-2022-40886
DedeCMS 5.7.98 has a file upload vulnerability in the background...
Desdev DedeCMS 代码问题漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS 5.7.98 version of the code...
PT-2022-25608 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.98 Description: The issue is related to a file upload vulnerability in the background of the software. Recommendations: For DedeCMS version 5.7.98, at the moment, there is no information about a newer version that contains...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2022-62223)
DedeCMS 织梦内容管理系统 is a PHP-based open source content management system CMS from China's Zhuo Zhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval.A security vulnerability exists in DedeCMS version V5.7.97, which was discovered to...
CVE-2022-36583
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...
CVE-2022-36583
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...