CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

Sql injection

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

CVE-2020-22198

CVE-2020-22198 corresponds to a SQL injection vulnerability in DedeCMS 5.7, exploitable via the mdescription parameter to member/ajax_membergroup.php. The connected documents confirm the affected product (DedeCMS 5.7) and the vulnerable component/entry point, but do not provide specific exploit d...

CVE-2020-22198

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajaxmembergroup.php...

Desdev DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS version 5.7 SQL injection...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2020-16632

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

Cross site scripting

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

Cross site request forgery (csrf)

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2020-16632

A XSS Vulnerability in /uploads/dede/actionsearch.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter...

CVE-2020-16632

CVE-2020-16632 is an XSS vulnerability in DedeCMS 5.7 SP2, described across multiple sources as allowing an authenticated user to execute remote arbitrary code via the keyword parameter in /uploads/dede/action_search.php. The connected documents confirm the affected software and the underlying is...

CVE-2021-32073

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution...

CVE-2021-32073

CVE-2021-32073 affects DedeCMS v5.7 SP2. A CSRF vulnerability in the web manager allows a remote attacker to craft a malicious request that results in remote code execution. Exploitation details are not provided in the initial documents beyond the CSRF and RCE outcome. The related sources (RH Red...

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery...

DedeCMS 跨站脚本漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...

DedeCMS suffers from SQL injection vulnerability (CNVD-2021-23369)

DedeCMS is a versatile tool that allows for comprehensive management of various sections on a website. DedeCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19725)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in DEDECMS (CNVD-2021-19724)

DEDECMS is a universal tool that allows you to comprehensively manage various sections on your website. DEDECMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...