PT-2024-30086

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.115 Description DedeCMS has a command execution vulnerability via the "file manage view.php" endpoint with parameters fmdo=newfile and activepath. This issue allows for command execution. No information is provided about th...

PT-2023-15590

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7.97 Description A cross-site scripting XSS issue was found in the component /file manage view.php?fmdo=edit&filename. This issue can potentially allow attackers to inject malicious scripts into websites, affecting user...

PT-2021-7899

Name of the Vulnerable Software and Affected Versions DedeCMS version 7.5 SP2 Description The issue is related to multiple cross-site scripting XSS vulnerabilities in the file manage view.php component. These vulnerabilities can be exploited via the activepath, keyword, tag, fmdo=x&filename,...

PT-2018-10966

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to V5.7SP2 Description The issue allows for arbitrary file upload. This can be achieved by sending a request to the /dede/file manage view.php?fmdo=upload endpoint with a malicious upfile1 parameter, enabling the upload ...

PT-2018-10967

Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7SP2 Description The issue allows for arbitrary file write in dede/file manage control.php via a "dede/file manage view.php?fmdo=newfile" request with name and str parameters. This can be exploited to write to a new...