PT-2024-22523 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was discovered in DedeCMS. The issue is related to the "/dede/plus edit.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider...

CVE-2024-28666

DedeCMS version 5.7 contains a Cross-Site Request Forgery (CSRF) vulnerability within the /dede/media_add.php component. This flaw allows an attacker to perform unintended actions on the web application by tricking an authenticated user into making a request. As of current documentation, no offic...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

CVE-2024-28673: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/mychanneledit.php...

CVE-2024-28679: Improper Neutralization of Input During Web Page Generation

DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...

CVE-2024-28666: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...

CVE-2024-28667

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability located in the /dede/templets_one_edit.php component. This flaw allows an attacker to perform unauthorized actions on behalf of an authenticated user. As a temporary workaround, it is recommended to restrict access t...

CVE-2024-28429: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/archivesdo.php...

CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/articlekeywordsmain.php...

CVE-2024-28677

DedeCMS v5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability involving the /dede/article_keywords_main.php endpoint. This flaw allows an attacker to potentially perform unauthorized actions on behalf of a logged-in user. As of the provided documentation, there is no informatio...

CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/plusedit.php...

CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

CVE-2024-28680

DedeCMS version 5.7 is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This security flaw is triggered via the /dede/diy_add.php API endpoint, allowing an attacker to perform unauthorized actions. While the documents do not provide specific remediation details other than the rec...

CVE-2024-28671

DedeCMS v5.7 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability affecting the /dede/stepselect_main.php API endpoint. This flaw allows an attacker to perform unauthorized actions by tricking a victim's browser into making requests to the target system. As a temporary workaround, i...

CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...

CVE-2024-28676

DedeCMS v5.7 is vulnerable to a cross-site scripting (XSS) vulnerability within the /dede/article_edit.php API endpoint. This flaw is caused by the improper neutralization of input during web page generation. Exploitation could allow an attacker to execute malicious scripts in the context of the ...

CVE-2024-28669: Cross-Site Request Forgery (CSRF)

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistedit.php...

CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/modulemain.php...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...