1702 matches found
PT-2024-22508 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/templets one edit.php. This allows for unauthorized actions to be performed on behalf of an authenticated user...
CVE-2024-28671
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
PT-2024-22519 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/article description main.php. This allows an attacker to perform unintended actions on the website. Recommendations: For...
CVE-2024-28670
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...
CVE-2024-28677
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...
PT-2024-22429 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the "/dede/archives do.php" component. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For DedeCMS version 5.7,...
CVE-2024-28678
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
CVE-2024-28678
CVE-2024-28678 affects DedeCMS v5.7, with a CSRF vulnerability via the /dede/article_description_main.php component. The connected sources confirm the issue but do not provide a concrete patch version; one document notes a temporary workaround to restrict access to that component until a fix is a...
CVE-2024-28673
CVE-2024-28673 affects DedeCMS v5.7 and describes a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /dede/mychannel_edit.php endpoint. The NVD/Red Hat and related feeds consistently cite CSRF impact with a CVSSv3.1 base score of 8.8 (High) and a user interaction requirement. T...
CVE-2024-28665
Summary (CVE-2024-28665) DedeCMS v5.7 is reported to have a Cross-Site Request Forgery (CSRF) vulnerability through the component /dede/article_add.php. The available connected records confirm the affected product and page, but do not provide a confirmed patch version or remediation steps. The CS...
CVE-2024-28677
DedeCMS v5.7 contains a Cross-Site Request Forgery (CSRF) vulnerability via the /dede/article_keywords_main.php endpoint. Multiple sources (NVD/Red Hat/CNNVD/CVE listings, OpenVAS notes) corroborate a CSRF issue affecting DedeCMS 5.7; no explicit exploit details or fixed version are provided in t...
CVE-2024-28669
DedeCMS v5.7 is reported to be vulnerable to a Cross-Site Request Forgery (CSRF) via the endpoint /dede/freelist_edit.php. The available sources identify the affected software/version and the CSRF issue but do not provide technical details such as exact request parameters, root cause, exploit ste...
CVE-2024-28675
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability exposed via the /dede/diy_edit.php endpoint. The CVE describes CSRF with high impact potential (C, I, A HIGH; CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). No exploit details are provided in the primary documents; exp...
CVE-2024-28666
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/media_add.php component. The CVE-2024-28666 entry confirms a CSRF issue with DedeCMS 5.7, with a CVSS v3.1 base score of 5.5 (Medium) and attack vector Network, requiring user interaction and low privileges...
CVE-2024-28683
DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...
CVE-2024-28675
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...
CVE-2024-28673
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mychanneledit.php...
