2058 matches found
CVE-2024-3144 DedeCMS makehtml_spec.php cross-site request forgery
A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtmlspec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3144 DedeCMS makehtml_spec.php cross-site request forgery
A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtmlspec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3144
A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtmlspec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3144
CVE-2024-3144 : DedeCMS 5.7 is affected via an unknown functionality in /src/dede/makehtml_spec.php, allowing cross-site request forgery. The issue can be exploited remotely and an exploit has been published. Some sources advise a temporary mitigation by restricting access to the vulnerable file ...
CVE-2024-3143
CVE-2024-3143 affects DedeCMS 5.7. The vulnerability exists in an unknown function of /src/dede/member_rank.php and results in cross-site request forgery. Exploitation is remote, and the public exploit is disclosed. The entry notes VDB-258918 and that the vendor was contacted without response. No...
CVE-2024-3143
A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/memberrank.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
CVE-2024-3143 DedeCMS member_rank.php cross-site request forgery
A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/memberrank.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
CVE-2024-3143 DedeCMS member_rank.php cross-site request forgery
A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/memberrank.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
Desdev DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS v5.7,...
Desdev DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS v5.7,...
Desdev DedeCMS 安全漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists in...
Desdev DedeCMS 跨站请求伪造漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
Desdev DedeCMS 跨站请求伪造漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
Desdev DedeCMS SQL注入漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A SQL injection vulnerability exists in DedeCMS...
CVE-2024-30946
DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /src/dede/co_do.php API endpoint. This vulnerability allows an attacker to perform unauthorized actions by tricking a logged-in user into submitting a forged request. As of the current documentation, the...
CVE-2024-3144: Cross-Site Request Forgery (CSRF)
A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtmlspec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclos...
CVE-2024-3146: Cross-Site Request Forgery (CSRF)
A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/makehtmlrssaction.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
CVE-2024-3145: Cross-Site Request Forgery (CSRF)
A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/makehtmljsaction.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...