CVE-2024-28684: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

PT-2024-22526 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the component /dede/module main.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the /dede/module...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

CVE-2024-28665

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_add.php component. This flaw allows an attacker to perform unintended actions on the website. As of the current documentation, no patch is available; however, it is recommended to restrict ac...

CVE-2024-28668

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/mychannel_add.php component. This vulnerability allows an attacker to perform unauthorized actions by tricking a victim's browser into sending a forged request to the application. While no officia...

CVE-2024-28432

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/article_edit.php component. This flaw allows an attacker to perform malicious requests on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access to the affect...

CVE-2024-28669

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/freelist_edit.php endpoint. This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. As a temporary workaround, users are recommended to restrict access to this spec...

CVE-2024-28675

DedeCMS v5.7 , a PHP-based content management system by Desdev, contains a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the /dede/diy_edit.php API endpoint, which allows an attacker to perform unauthorized actions via a forged request. Exploitation details are not provided ...

CVE-2024-28430

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/catalog_edit.php component. This flaw allows an attacker to trigger potentially malicious requests without the user's knowledge or consent. As a temporary workaround, users are advised to restrict access ...

CVE-2024-28682

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/sys_cache_up.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the CMS. As a temporary workaround, users are advised...

PT-2024-22433 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article edit.php component. This allows for malicious requests to be made on behalf of the user. Recommendations: For DedeCMS version 5.7, as a...

CVE-2024-28432: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28680: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyadd.php...

CVE-2024-28670: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...

CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...

CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mediaedit.php...

PT-2024-22519 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/article description main.php. This allows an attacker to perform unintended actions on the website. Recommendations: For...

PT-2024-22523 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was discovered in DedeCMS. The issue is related to the "/dede/plus edit.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider...