1703 matches found
Cross site scripting
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...
CVE-2018-18782
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter...
CVE-2018-18782
CVE-2018-18782 affects DedeCMS 5.7 SP2, with a Reflected XSS in the /member/myfriend.php ftype parameter. The root cause is the unescaped ftype input reflected in the page, enabling injection of arbitrary scripts. Documents do not provide exploitation status, in-the-wild details, or specific reme...
CVE-2018-18781
DedeCMS 5.7 SP2 is affected by a cross-site scripting (XSS) vulnerability in the /member/uploads_select.php endpoint, exploitable via the keyword parameter. The issue is caused by improper handling of input in that parameter, enabling injection of arbitrary scripts. The CVE-2018-18781 entry is co...
CVE-2018-18781
DedeCMS 5.7 SP2 allows XSS via the /member/uploadsselect.php f or keyword parameter...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2019-01727)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/myfriend.php file in DedeCMS version 5.7 SP2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'fype' parameter...
DedeCMS has information leakage vulnerability
Dream Content Management System DedeCMS is a PHP open source website management system. An information disclosure vulnerability exists in DedeCMS. An attacker can exploit the vulnerability to obtain sensitive user information that is publicly available on some websites...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2018-21787)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the 'GetPageList' function in the include/datalistcp.class.php file in DedeCMS version 5.7 SP2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
CVE-2018-18608
DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php, /member/contentlist.php, or...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php, /member/contentlist.php, or...
CVE-2018-18608
DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php, /member/contentlist.php, or...
CVE-2018-18608
Summary of CVE-2018-18608 (DedeCMS 5.7 SP2) : A cross-site scripting vulnerability exists in the GetPageList function (include/datalistcp.class.php) used to render the bottom page-number list, exploitable via PATH_INFO on endpoints such as /member/index.php, /member/pm.php, /member/content_list.p...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2018-21796)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the plus/qrcode.php page in DedeCMS version 5.7 SP2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the 'type' parameter...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2018-21795)
DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/pm.php page in DedeCMS version 5.7 SP2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'folder' parameter...
Cross site scripting
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter...
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...
CVE-2018-18579
Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter...
CVE-2018-18578
DedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter...