CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2023-7212

CVE-2023-7212 affects DeDeCMS up to version 5.7.112 in the Backend component, via an unknown function in file_class.php, causing unrestricted file upload that can be exploited remotely. Exploitation has been disclosed publicly. Affected software: DeDeCMS; vulnerability class: critical. Remediatio...

PT-2024-15234 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DeDeCMS versions up to 5.7.112 Description: A critical vulnerability has been found in DeDeCMS, affecting an unknown function of the file file class.php in the Backend component. This vulnerability leads to unrestricted upload and can be...

DeDeCMS 代码问题漏洞

DeDeCMS is a PHP-based open source content management system CMS. The system features content publishing, content management, content editing and content retrieval. A file upload vulnerability exists in DeDeCMS version 5.7.112 and earlier versions, which stems from the application's lack of...

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

Cross site scripting

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component selectmediapostwangEditor.php...

PT-2023-31247 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS via the component select media post wangEditor.php. This allows for potential XSS attacks. Recommendations: For DedeCMS version 5.7.111...

CVE-2023-49494

Summary: CVE-2023-49494 affects DedeCMS v5.7.111 and is a reflective XSS vulnerability exposed through the component select_media_post_wangEditor.php . The root cause is a reflective XSS vector in that specific page/component, enabling an attacker to inject script when a user visits a crafted URL...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the imgstick parameter at selectimages.php...

Cross site scripting

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

PT-2023-31245 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.111 Description: A reflective cross-site scripting XSS issue was discovered in DedeCMS. The vulnerability is exploited via the imgstick parameter at the "selectimages.php" endpoint. This allows for malicious scripts to be...

CVE-2023-49493

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting XSS vulnerability via the v parameter at selectimages.php...

CVE-2023-49492

CVE-2023-49492 affects DedeCMS v5.7.111 with a reflective XSS vulnerability exploitable via the imgstick parameter on selectimages.php. Root cause: improper input handling in the imgstick parameter leading to script injection. Impact as stated: cross-site scripting risk; no exploit details provid...

CVE-2023-49493

DedeCMS v5.7.111 is affected by a reflective cross-site scripting (XSS) vulnerability in selectimages.php via the v parameter. CVSSv3.1 base score 6.1 (MEDIUM). Exploitation details and patches are not provided in the connected documents; no remediation/version fixes are stated.