CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

DesDev DedeCMS 跨站脚本漏洞

DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China Zhuozhuo DesDev. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in DesDev DedeCMS...

DesDev DedeCMS 安全漏洞

DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo DesDev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DesDev DedeCMS versio...

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46373

Dedecms V5.7.115 , a PHP-based open-source content management system from DesDev (Zhuozhuo), is vulnerable to arbitrary code execution . The flaw originates from a file upload vulnerability in the backend, which may allow an attacker to upload and execute malicious files. While the specific techn...

CVE-2024-46372

CVE-2024-46372 affects DedeCMS 5.7.115. Vulnerability: Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. Impact described as potential malicious script execution; no patch/version fix details provided. Mitigations/recommendations from PTSecurity sug...

CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

PT-2024-31973 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.115 Description: The issue is related to Cross Site Scripting XSS via the advertisement code box in the advertisement management module. This allows for potential malicious script execution. Recommendations: For DedeCMS...

PT-2024-31974

Name of the Vulnerable Software and Affected Versions Dedecms version 5.7.115 Description The issue is related to an arbitrary code execution via file upload vulnerability in the backend. Recommendations For Dedecms version 5.7.115, as a temporary workaround, consider disabling file uploads in th...

CVE-2024-46373: Unrestricted Upload of File with Dangerous Type

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend...

CVE-2024-46372: Improper Neutralization of Input During Web Page Generation

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting XSS via the advertisement code box in the advertisement management module...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

DesDev DedeCMS 安全漏洞

DesDev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Dedev Network DesDev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DesDev DedeCMS...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS (Dream Weaving Content Management System) version V5.7.115 is susceptible to a command execution vulnerability. The root cause is the improper neutralization of special elements used in a command, accessible via the file_manage_view.php?fmdo=newfile&activepath endpoint. This flaw could al...