2058 matches found
CVE-2024-30946
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/codo.php...
CVE-2024-30946
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/codo.php...
CVE-2024-30965
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/memberscores.php...
PT-2024-23695 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the /src/dede/member scores.php endpoint. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS...
PT-2024-24091 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic issue has been found in DedeCMS, affecting an unknown part of the file /src/dede/makehtml rss action.php. This issue leads to cross-site request forgery and can be initiated remotely. The exploit...
PT-2024-24112 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: A critical issue has been found in the processing of the file dede/makehtml archives action.php, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...
PT-2024-24077 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A vulnerability was found in DedeCMS, affecting an unknown functionality of the file /src/dede/makehtml spec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...
PT-2024-24083 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problem was found in DedeCMS. It affects some unknown functionality of the file /src/dede/makehtml js action.php. The issue leads to cross-site request forgery. The attack can be launched remotely. The explo...
PT-2024-24101 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A problematic vulnerability was found in DedeCMS, affecting unknown code of the file /src/dede/makehtml map.php. This issue leads to cross-site request forgery and can be initiated remotely. The exploit has be...
PT-2024-23684 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability is exploited via the "/src/dede/co do.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...
CVE-2024-3143: Cross-Site Request Forgery (CSRF)
A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/memberrank.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
CVE-2024-30946: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/codo.php...
CVE-2024-3147: Cross-Site Request Forgery (CSRF)
A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/makehtmlmap.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...
Desdev DedeCMS 跨站请求伪造漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
Desdev DedeCMS 跨站请求伪造漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
CVE-2024-30965
DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability through the /src/dede/member_scores.php endpoint. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access to this ...
CVE-2024-30965: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/memberscores.php...
CVE-2024-30965
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /src/dede/memberscores.php...
CVE-2024-3148: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/makehtmlarchivesaction.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...
