13 matches found
EUVD-2017-8882
Malware in sbrugna...
EUVD-2018-10776
Malware in sbrugna...
EUVD-2024-32260
Malicious code in bioql PyPI...
EUVD-2023-31469
Malicious code in bioql PyPI...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2022-46442
dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...
CVE-2024-3685 DedeCMS stepselect_main.php sql injection
A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselectmain.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-3148 DedeCMS makehtml_archives_action.php sql injection
A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/makehtmlarchivesaction.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...
PT-2022-27876 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: dedecms versions prior to V5.7.103 Description: The issue is related to SQL Injection. In the sys sql n query.php file, there are no restrictions on the SQL query, which can be exploited. Recommendations: For dedecms versions prior to V5.7.10...
EUVD-2022-28417
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in articlecoonepagerule.php via the ids parameter...
CVE-2018-19061
DedeCMS 5.7 SP2 has SQL Injection via the dede\codo.php ids parameter...
CVE-2017-17731
DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php...
DedeCMS 5.7 /plus/flink_add.php SQL注入漏洞
common.inc.php这里开始过滤得很完整，往下看//转换上传的文件相关的变量及安全处理、并引用前台通用的上传函数PHPphp if$FILES requireonceDEDEINC.'/uploadsafe.inc.php'; uploadsafe.inc.php//29行 $$key = $FILES$key'tmpname' = strreplace"\\", "\", $FILES$key'tmpname'; 能绕过 GPCplus\flink.php虽然都经过...