CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

CVE-2022-48140

DedeCMS v5.7.97 is reported to have a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename. The issue is documented across multiple sources (e.g., CVE-2022-48140, NVD, RH, CNNVD, OpenVAS) with a CVSS v3.1 base score of 5.4 (Medium) and attributes: AV:...

CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

PT-2023-15590

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.97 Description A cross-site scripting XSS issue was found in the component /file manage view.php?fmdo=edit&filename. This issue can potentially allow attackers to inject malicious scripts into websites, affecting user...

CVE-2022-48140: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

DedeCMS <= 5.7.109 SQLi Vulnerability

DedeCMS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dedecms:dedecms"; if...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

Sql injection

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

PT-2022-27876 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: dedecms versions prior to V5.7.103 Description: The issue is related to SQL Injection. In the sys sql n query.php file, there are no restrictions on the SQL query, which can be exploited. Recommendations: For dedecms versions prior to V5.7.10...

DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS V5.7.102 and previous versions ...

CVE-2022-46442

Affected product: DedeCMS (Dedecms) versions up to v5.7.102. Root cause: SQL injection in the sys_sql_n_query.php path with no restrictions on the SQL query. Impact as per CVSS: high confidentiality, integrity, and availability impact (C/H, I/H, A/H) at network attack vector with no privileges re...

CVE-2022-46442: Improper Neutralization of Special Elements used in an SQL Command

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

DedeCMS V5.7 SP2 <= 5.7.107 RCE Vulnerability

DedeCMS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dedecms:dedecms"; ...

DedeCMS V6 < 6.1.9 CSRF Vulnerability

DedeCMS is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A SQL injection vulnerability exists ...