CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

Sql injection

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS V5.7.102 and previous versions ...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

dedecms =V5.7.102 is vulnerable to SQL Injection. In sys sql n query.php there are no restrictions on the sql query...

CVE-2022-46442

Affected product: DedeCMS (Dedecms) versions up to v5.7.102. Root cause: SQL injection in the sys_sql_n_query.php path with no restrictions on the SQL query. Impact as per CVSS: high confidentiality, integrity, and availability impact (C/H, I/H, A/H) at network attack vector with no privileges re...

PT-2022-27876 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: dedecms versions prior to V5.7.103 Description: The issue is related to SQL Injection. In the sys sql n query.php file, there are no restrictions on the SQL query, which can be exploited. Recommendations: For dedecms versions prior to V5.7.10...

DedeCMS V6 < 6.1.9 CSRF Vulnerability

DedeCMS is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DedeCMS V5.7 SP2 <= 5.7.107 RCE Vulnerability

DedeCMS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dedecms:dedecms"; ...

DedeCMS SQL注入漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A SQL injection vulnerability exists ...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

DedeCMS Arbitrary File Upload Vulnerability (CNVD-2022-80695)

DedeCMS Weaving Dream Content Management System is a PHP-based open source content management system CMS. The system has content publishing, content management, content editing and content retrieval functions.An arbitrary file upload vulnerability exists in the /dede/filemanagecontrol.php compone...

CVE-2022-43192

An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...

CVE-2022-43192

An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...

Design/Logic Flaw

An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...

CVE-2022-43192

An arbitrary file upload vulnerability in the component /dede/filemanagecontrol.php of Dedecms v5.7.101 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is related to an incomplete fix for CVE-2022-40886...

CVE-2022-43192

CVE-2022-43192 describes an arbitrary file upload vulnerability in Dedecms v5.7.101, specifically the component /dede/file_manage_control.php, allowing an attacker to execute arbitrary PHP code via a crafted file. The issue is linked to an incomplete fix for CVE-2022-40886. The connected sources ...

DedeCMS Remote Code Execution (CVE-2022-36216)

A remote code execution vulnerability exists in DedeCMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...