1702 matches found
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Design/Logic Flaw
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
CVE-2023-36298
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution RCE...
Desdev DedeCMS Code Issue Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
CVE-2023-36298
CVE-2023-36298 : The connected sources identify a file-upload vulnerability in DedeCMS v5.7.109 that can lead to remote code execution (RCE). The records do not specify the root cause details, affected subcomponents, exact exploit vectors, or a published fix/patch version. No in-the-wild exploita...
CVE-2023-34842
Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...
CVE-2023-34842
Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...
Remote code execution
Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...
CVE-2023-34842
Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...
CVE-2023-34842
Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php...
PT-2023-25028 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions through 5.7.109 Description: The issue allows remote attackers to run arbitrary code via a crafted POST request to the "/dede/tpl.php" API endpoint. This enables attackers to execute arbitrary code on the affected system...
Desdev DedeCMS 代码注入漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
CVE-2023-34842
CVE-2023-34842 affects DedeCMS up to version 5.7.109. A remote code execution flaw allows an attacker to send a crafted POST request to /dede/tpl.php to run arbitrary code, with high impact to confidentiality, integrity, and availability. Affected software is DedeCMS; the vulnerability stems from...
CVE-2023-37839
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-37839
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-37839
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
Design/Logic Flaw
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-37839
CVE-2023-37839 concerns DedecMS v5.7.109. The vulnerability is an arbitrary file upload in the endpoint /dede/file_manage_control.php that allows uploading a crafted PHP file to execute arbitrary code on the server. Affected software: DedecMS v5.7.109 (DedeCMS). Root cause: insufficient validatio...