CVE-2026-51078: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-38615: Improper Neutralization of Special Elements used in an OS Command

DedeCMS V5.7.118 is vulnerable to Command Execution in filemanagecontrol.php...

CVE-2024-7904 DedeBIZ File Extension file_manage_control.php unrestricted upload

A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...

CVE-2024-7904: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...

CVE-2024-35510

An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-35510: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-43234: Improper Control of Generation of Code

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...

CVE-2023-43234

CVE-2023-43234 affects DedeBIZ v6.2.11. The vulnerability exists in the /admin/file_manage_control.php endpoint, exploitable via the $activepath and $filename parameters, enabling remote code execution. Multiple sources describe the root cause as improper handling/filtering of constructed snippet...

CVE-2023-43234

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...

CVE-2023-37839: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

CVE-2022-43196

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

Arbitrary file deletion

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-43196: Undefined Security Weakness

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-44118: Undefined Security Weakness

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

CVE-2022-44118

CVE-2022-44118 affects dedecmdv6 v6.1.9, with a Remote Code Execution (RCE) vulnerability via the file_manage_control.php endpoint. Public sources consistently identify an RCE risk in this version; details include the affected software (dedecmdv6 v6.1.9) and the vulnerable endpoint. The issue is ...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

CVE-2022-43196

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-43196

CVE-2022-43196 affects dedecmdv6 v6.1.9. The vulnerability enables Arbitrary file deletion via the file_manage_control.php endpoint. The provided documents confirm the affected software and the specific function/file involved, but do not supply full root-cause details, affected environments beyon...