1696 matches found
PT-2024-14376 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: Dedecms version 5.7.112 Description: A Cross-Site Request Forgery CSRF issue was discovered in the file manager of Dedecms. This issue allows an attacker to perform unauthorized actions on the vulnerable system. Recommendations: For Dedecms...
SQL Injection Vulnerability in DedeCMS of Shanghai Zhuozhuo Network Technology Company Limited (CNVD-2024-13237)
DedeCMS is the most well-known PHP open source website management system, but also the use of the most users of the PHP class CMS system. Shanghai Zhuozhuo Network Technology Co., Ltd. DedeCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive informatio...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
Design/Logic Flaw
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
PT-2024-19602 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.112 Description: The issue is related to a File Upload vulnerability. This vulnerability can be exploited via the "uploads/dede/module upload.php" endpoint. Recommendations: For DedeCMS version 5.7.112, consider restrictin...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...
CVE-2024-22895
DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/moduleupload.php...
CVE-2024-22895
DedeCMS 5.7.112 is affected by a File Upload vulnerability in uploads/dede/module_upload.php. The CVE-2024-22895 entry indicates a high-severity issue (CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 8.8) with network attack vector and low privileges required, no user interaction. Conne...
DeDeCMS File Upload Vulnerability (CNVD-2024-02995)
DeDeCMS is a PHP-based open source content management system CMS. The system features content publishing, content management, content editing and content retrieval. A file upload vulnerability exists in DeDeCMS version 5.7.112 and earlier versions, which stems from the application's lack of...
CVE-2023-7212
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-7212
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...
Design/Logic Flaw
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-7212
CVE-2023-7212 affects DeDeCMS up to version 5.7.112 in the Backend component, via an unknown function in file_class.php, causing unrestricted file upload that can be exploited remotely. Exploitation has been disclosed publicly. Affected software: DeDeCMS; vulnerability class: critical. Remediatio...
CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...
DeDeCMS 代码问题漏洞
DeDeCMS is a PHP-based open source content management system CMS. The system features content publishing, content management, content editing and content retrieval. A file upload vulnerability exists in DeDeCMS version 5.7.112 and earlier versions, which stems from the application's lack of...
PT-2024-15234 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DeDeCMS versions up to 5.7.112 Description: A critical vulnerability has been found in DeDeCMS, affecting an unknown function of the file file class.php in the Backend component. This vulnerability leads to unrestricted upload and can be...