Lucene search
+L

2058 matches found

OSV
OSV
•added 2020/10/22 3:15 p.m.•15 views

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

5.4CVSS6.1AI score0.03564EPSS
SaveExploits3References2
NVD
NVD
•added 2020/10/22 3:15 p.m.•32 views

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

5.4CVSS0.03564EPSS
SaveExploits3References2
Prion
Prion
•added 2020/10/22 3:15 p.m.•29 views

Cross site scripting

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

3.5CVSS5.2AI score0.03564EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2020/10/22 2:53 p.m.•46 views

CVE-2020-27533

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

5.3AI score0.03564EPSS
SaveExploits3References2
CVE
CVE
•added 2020/10/22 2:53 p.m.•89 views

CVE-2020-27533

CVE-2020-27533 concerns an XSS in DedeCMS v5.8, specifically in the search feature. The available connected documents identify the affected component as the search functionality (action_search.php) and confirm a cross-site scripting vulnerability that allows injected script to be executed by othe...

5.4CVSS5.3AI score0.03564EPSS
SaveExploits3References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/10/22 12:00 a.m.•3 views

PT-2020-16699

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.8 Description A Cross Site Scripting XSS issue was discovered in the search feature that allows malicious users to inject code into web pages, affecting other users when viewing these pages. Recommendations For DedeCMS versio...

5.4CVSS0.03564EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/22 12:00 a.m.•6 views

CVE-2020-27533: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to inject code into web pages, and other users will be affected when viewing web pages...

5.4CVSS5.8AI score0.03564EPSS
SaveExploits3References2
CNVD
CNVD
•added 2020/07/24 12:00 a.m.•9 views

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2020-49415)

DedeCMS is an open source content management system. Shanghai Zhuozhuo Network Technology Co., Ltd DedeCMS has a code execution vulnerability that can be exploited by attackers to gain server control privileges...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/23 12:00 a.m.•4 views

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/23 12:00 a.m.•5 views

File Upload Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Co.

DedeCMS for PHP Web Content Management System - Dream Content Management System, using XML namespace style core templates: templates are all saved using the file form, the user design templates, website upgrades transfer are provided to facilitate the transfer of template labels stationmasters ca...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/06/18 12:00 a.m.•4 views

DedeCMS suffers from SQL injection vulnerability (CNVD-2020-41331)

DedeCMS is a web content management system. DedeCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
zdt
zdt
•added 2020/04/16 12:00 a.m.•64 views

DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vendor Link: http://www.dedecms.com Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/04/15 12:00 a.m.•123 views

DedeCMS 7.5 SP2 Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Scripting Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/04/15 12:00 a.m.•212 views

DedeCMS 7.5 SP2 Persistent Cross Site Scripting

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-09 Vulnerability Laboratory ID VL-ID: ===================================...

7.4AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2020/04/08 12:00 a.m.•57 views

DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID: ===================================...

7.4AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2020/04/07 12:00 a.m.•266 views

DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-07 Vulnerability Laboratory ID VL-ID: ===================================...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/29 12:00 a.m.•7 views

XSS Vulnerability in DedeCMS 5.7SP2

DedeCMS is a collection of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7SP2 exists XSS vulnerability, attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

6AI score
SaveExploits0
Gitee
Gitee
•added 2020/03/23 1:05 p.m.•15 views

dedecmscan

This is a Python script designed to scan for vulnerabilities in DedeCMS, a content management system. The script is called "dedescan" and is written in Python 3. It uses various modules to perform different types of scans, including SQL injection, cross-site scripting XSS, and path traversal. The...

7.2AI score
SaveExploits0
NVD
NVD
•added 2020/01/06 9:15 p.m.•36 views

CVE-2015-4553

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

8.8CVSS8.7AI score0.56738EPSS
SaveExploits6References3
Prion
Prion
•added 2020/01/06 9:15 p.m.•32 views

Unrestricted file upload

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell...

6.5CVSS7AI score0.56738EPSS
SaveExploits6References3Affected Software1
Rows per page
Query Builder