2058 matches found
CVE-2024-33749
DedeCMS V5.7.114 is vulnerable to deletion of any file via mailfilemanage.php...
CVE-2024-33749
DedeCMS V5.7.114 is vulnerable to deletion of any file via mailfilemanage.php...
CVE-2024-33749
DedeCMS version V5.7.114 is vulnerable to an Improper Authorization issue (CWE-285) that allows an attacker to delete any file on the system via the mail_file_manage.php script. This vulnerability can lead to significant data loss , system compromise , or a Denial of Service (DoS) . To remediate ...
CVE-2024-33749
DedeCMS V5.7.114 is vulnerable to deletion of any file via mailfilemanage.php...
PT-2024-25462 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.114 Description: The issue allows for the deletion of any file via the "mail file manage.php" script. This can potentially lead to significant data loss or system compromise. There is a mention of a Denial of Service DoS...
CVE-2024-33749: Improper Authorization
DedeCMS V5.7.114 is vulnerable to deletion of any file via mailfilemanage.php...
Desdev DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS versi...
CVE-2024-33371
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...
Desdev DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...
CVE-2024-33371
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...
CVE-2024-33371
A Cross Site Scripting (XSS) vulnerability exists in DedeCMS v.5.7.113 . A remote attacker can exploit this issue to execute arbitrary code by targeting the typeid parameter within the makehtml_list_action.php component. While the documents describe the impact as arbitrary code execution via XSS,...
CVE-2024-33371
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...
PT-2024-25219 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.113 Description: The issue allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml list action.php component. This is a Cross Site Scripting vulnerability. Recommendations: For DedeCMS...
CVE-2024-33371: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtmllistaction.php component...
CVE-2024-33401
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...
PT-2024-25233
Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.113 Description The issue allows a remote attacker to run arbitrary code via the mnum parameter, which is related to a Cross Site Scripting vulnerability. Recommendations For DedeCMS version 5.7.113, consider restricting...
CVE-2024-33401: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...
CVE-2024-33401
Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter...
CVE-2024-33401
DedeCMS version 5.7.113 is susceptible to a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via the mnum parameter. This issue originates from improper neutralization of input during web page generation. While no official patch version is currently...