Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

CVE-2024-35510: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-35375

DedeCMS version 5.7.114 is susceptible to an arbitrary file upload vulnerability located on the mediaadd.php page in the backend of the website. This flaw allows for the unrestricted upload of files with dangerous types (CWE-434), potentially leading to high impact on confidentiality, integrity, ...

Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

PT-2024-26468 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.114 Description: The issue concerns an arbitrary file upload vulnerability located on the media add .php page in the backend of the website. Recommendations: For version 5.7.114, consider restricting access to the media ad...

CVE-2024-35375: Unrestricted Upload of File with Dangerous Type

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-34959

DedeCMS version V5.7.113 is vulnerable to Cross-Site Scripting (XSS) . The vulnerability originates from the sys_data_replace.php file, where improper neutralization of input during web page generation allows for the execution of malicious scripts. The impact includes a Medium base severity (CVSS...

CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...

PT-2024-26273 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.113 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the sys data replace.php file. Recommendations: For DedeCMS version 5.7.113, at the moment, there is no information about a newer...

CVE-2024-34959: Improper Neutralization of Input During Web Page Generation

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting XSS via sysdatareplace.php...

CVE-2024-4790

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sysverifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate...