CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

Unrestricted file upload

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

CVE-2015-4553

DeDeCMS

DedeCMS backend has SQL injection vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. A SQL injection vulnerability exists in the backend of DedeCMS. The vulnerability stems from the lack of validation of externally entered SQL statements in the database-based application, which can be exploite...

Stored cross-site scripting vulnerability in DedeCMS ed***_sp***_in***.php page

Dream Content Management System DedeCMS is a PHP open source website management system. A stored cross-site scripting vulnerability exists in the DedeCMS edspin.php page. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user hijacking...

File Upload Vulnerability in DedeCMS v5.7

DedeCMS is a web content management system. A file upload vulnerability exists in DedeCMS v5.7, which can be exploited by attackers to gain server privileges...

Command Execution Vulnerability in DedeCMS V5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS V5.7, which can be exploited by an attacker to gain server privileges...

Dedecms backend has arbitrary file reading vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. Dedecms backend exists arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

Command Execution Vulnerability in DedeCMS

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS. An attacker can exploit this vulnerability to execute arbitrary commands and obtain server control privileges...

DedeCMS v5.7 has xss vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. An xss vulnerability exists in DedeCMS v5.7, which can be exploited by attackers to obtain an administrator cookie...

Command Execution Vulnerability in DedeCMS v5.7

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in DedeCMS v5.7, which can be exploited by an attacker to gain server privileges...

Command Execution Vulnerability in Dedecms

Dream Content Management System DedeCMS is a PHP open source website management system. A command execution vulnerability exists in Dedecms. Allows attackers to remotely execute commands and gain server privileges...

Code execution vulnerability in DedeCMS backend (CNVD-2019-12784)

Dream Content Management System DedeCMS is a PHP open source website management system. A code execution vulnerability exists in the backend of DedeCMS, which can be exploited by attackers to gain control of the web server...

File upload vulnerability in DedeCMS al***_ed***.php file

Dream Content Management System DedeCMS is a PHP open source website management system. A file upload vulnerability exists in the DedeCMS aled.php file. Allows an attacker to upload a webshell and gain server privileges...

The existence of arbitrary file deletion vulnerability dedecms

DedeCMS Dream Weaving Content Management System is China's Zhuozhuo Network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. dedecms there are arbitrary file deletion...

Desdev DedeCMS Arbitrary Password Reset Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...

Design/Logic Flaw

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

CVE-2019-10014

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...

CVE-2019-10014

In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...