1715 matches found
CVE-2024-28675
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/diyedit.php...
CVE-2024-28431
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...
CVE-2024-28665
Summary (CVE-2024-28665) DedeCMS v5.7 is reported to have a Cross-Site Request Forgery (CSRF) vulnerability through the component /dede/article_add.php. The available connected records confirm the affected product and page, but do not provide a confirmed patch version or remediation steps. The CS...
CVE-2024-28679
DedeCMS v5.7 was discovered to contain a cross-site scripting XSS vulnerability via Photo Collection...
CVE-2024-28677
DedeCMS v5.7 contains a Cross-Site Request Forgery (CSRF) vulnerability via the /dede/article_keywords_main.php endpoint. Multiple sources (NVD/Red Hat/CNNVD/CVE listings, OpenVAS notes) corroborate a CSRF issue affecting DedeCMS 5.7; no explicit exploit details or fixed version are provided in t...
CVE-2024-28669
DedeCMS v5.7 is reported to be vulnerable to a Cross-Site Request Forgery (CSRF) via the endpoint /dede/freelist_edit.php. The available sources identify the affected software/version and the CSRF issue but do not provide technical details such as exact request parameters, root cause, exploit ste...
CVE-2024-28671
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/stepselectmain.php...
PT-2024-22518 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The issue is related to the "/dede/article keywords main.php" API endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...
CVE-2024-28670
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/freelistmain.php...
CVE-2024-28678
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
CVE-2024-28678
CVE-2024-28678 affects DedeCMS v5.7, with a CSRF vulnerability via the /dede/article_description_main.php component. The connected sources confirm the issue but do not provide a concrete patch version; one document notes a temporary workaround to restrict access to that component until a fix is a...
PT-2024-22510 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS. The vulnerability is exploited via the "/dede/freelist edit.php" endpoint. Recommendations: For DedeCMS version 5.7, as a temporary workaround,...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
CVE-2024-28666
DedeCMS v5.7 is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the /dede/media_add.php component. The CVE-2024-28666 entry confirms a CSRF issue with DedeCMS 5.7, with a CVSS v3.1 base score of 5.5 (Medium) and attack vector Network, requiring user interaction and low privileges...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...
PT-2024-22508 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/templets one edit.php. This allows for unauthorized actions to be performed on behalf of an authenticated user...
PT-2024-22509 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in DedeCMS via the component /dede/mychannel add.php. Recommendations: For DedeCMS version 5.7, as a temporary workaround, consider restricting access to the...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
PT-2024-22429 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the "/dede/archives do.php" component. This allows an attacker to perform unintended actions on a user's behalf. Recommendations: For DedeCMS version 5.7,...
