File Upload Vulnerability in DedeCMS Editor

The popular domestic content management system CMS multi-terminal all-media solution, DedeCMSV6 system is based on PHP7.X development, highly scalable and fully open source. A file upload vulnerability exists in the DedeCMS editor, which can be exploited by attackers to upload malicious code and...

dedecmscan

This is a Python script for a web application vulnerability scanner, specifically targeting DedeCMS versions. The script is designed to identify various vulnerabilities in the application, including SQL injection, cross-site scripting XSS, and other potential issues. The script consists of severa...

DEDECMSV6 backend di***_li***.php file has SQL injection vulnerability

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A SQL injection vulnerability exists in the DEDECMSV6 backend dili.php file. An attacker can exploit this vulnerability to obtain sensitive information from the database...

DedeCMS v.5.8 - _keyword_ Cross-Site Scripting

Exploit Title: DedeCMS v.5.8 - "keyword" Cross-Site Scripting Date: 2020-07-27 Exploit Author: Noth Vendor Homepage: https://github.com/dedetech/DedeCMSv5 Software Link: https://github.com/dedetech/DedeCMSv5 Version: v.5.8 CVE : CVE-2020-27533 A Cross Site Scripting XSS issue was discovered in th...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

Cross site scripting

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

CVE-2020-27533

CVE-2020-27533 concerns an XSS in DedeCMS v5.8, specifically in the search feature. The available connected documents identify the affected component as the search functionality (action_search.php) and confirm a cross-site scripting vulnerability that allows injected script to be executed by othe...

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2020-49415)

DedeCMS is an open source content management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS has a code execution vulnerability that can be exploited by attackers to gain server control privileges...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

DedeCMS suffers from SQL injection vulnerability (CNVD-2020-41331)

DedeCMS is a web content management system. DedeCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vendor Link: http://www.dedecms.com Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web...

DedeCMS 7.5 SP2 Persistent Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-09 Vulnerability Laboratory ID VL-ID: ===================================...

DedeCMS 7.5 SP2 Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID:...

DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID: ===================================...

DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-07 Vulnerability Laboratory ID VL-ID: ===================================...

XSS Vulnerability in DedeCMS 5.7SP2

DedeCMS is a collection of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7SP2 exists XSS vulnerability, attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

dedecmscan

This is a Python script designed to scan for vulnerabilities in DedeCMS, a content management system. The script is called "dedescan" and is written in Python 3. It uses various modules to perform different types of scans, including SQL injection, cross-site scripting XSS, and path traversal. The...