2058 matches found
CVE-2024-28429
The PHP-based open-source content management system DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists in the /dede/archives_do.php component, which allows an attacker to perform unintended actions on a user's behalf. While no specific mitigation measures are prov...
PT-2024-22518 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The issue is related to the "/dede/article keywords main.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...
CVE-2024-28666
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...
CVE-2024-28431
DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/catalog_del.php component. This flaw allows an attacker to trigger malicious requests without the user's knowledge or consent. As a temporary workaround, it is recommended to restrict access to the /d...
CVE-2024-28671: Improper Neutralization of Input During Web Page Generation
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...
CVE-2024-28667: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...
CVE-2024-28675: Cross-Site Request Forgery (CSRF)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...
CVE-2024-28683: Improper Neutralization of Input During Web Page Generation
DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via create file...
CVE-2024-28680
DedeCMS version 5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This security flaw is triggered via the /dede/diy_add.php API endpoint, allowing an attacker to perform unauthorized actions. While the documents do not provide specific remediation details other than the rec...
CVE-2024-28671
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...
CVE-2024-28668
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mychanneladd.php...
CVE-2024-28670
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...
CVE-2024-28684
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...
CVE-2024-28678
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
CVE-2024-28667
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/templetsoneedit.php...
CVE-2024-28429
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...
CVE-2024-28680
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...
CVE-2024-28669
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...