1916 matches found
CVE-2024-30855
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...
CVE-2024-30855
The DedeCMS content management system, specifically version v5.7 , is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists within the /src/dede/makehtml_list_action.php endpoint, which could allow a malicious actor to trick a user into performing unintended actions on...
DesDev DedeCMS 安全漏洞
DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo DesDev. The system features content publishing, content management, content editing and content retrieval. DesDev DedeCMS v5.7 version of a security vulnerability ...
CVE-2024-30855: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...
CVE-2024-30855
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/makehtmllistaction.php...
PT-2025-53785
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description The software contains a Cross-Site Request Forgery CSRF issue. The vulnerability is located in the /src/dede/makehtml list action.php endpoint. A malicious actor can potentially cause a user to perform unintende...
CVE-2025-15004
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004 DedeCMS freelist_main.php sql injection
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
CVE-2025-15004
CVE-2025-15004 affects DedeCMS up to 5.7.118. The vulnerability is a SQL injection in the file /freelist_main.php caused by manipulating the orderby parameter, which can be exploited remotely. Public exploit code exists and is referenced across multiple feeds (e.g., PT-2025-52615, CNNVD, NVD). Re...
EUVD-2025-204680
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
DesDev DedeCMS SQL注入漏洞
DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has features such as content publishing, content management, content editing and content retrieval. A SQL injection vulnerability exists in DesDev...
PT-2025-52615
Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.118 Description A flaw exists in DedeCMS that allows for SQL injection. The issue is due to the manipulation of the orderby argument in the /freelist main.php file. This can be exploited remotely. The exploit is...
CVE-2025-15004: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelistmain.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used...
EUVD-2019-15854
Malware in sbrugna...
EUVD-2011-5100
Malware in sbrugna...
EUVD-2009-2266
Malware in sbrugna...
EUVD-2020-8593
Malware in sbrugna...