39 matches found
CVE-2026-51078
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...
CVE-2026-51078: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...
CVE-2026-38615: Improper Neutralization of Special Elements used in an OS Command
DedeCMS V5.7.118 is vulnerable to Command Execution in filemanagecontrol.php...
CVE-2024-7904
A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...
CVE-2024-7904 DedeBIZ File Extension file_manage_control.php unrestricted upload
A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...
CVE-2024-7904: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...
CVE-2024-35510
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-35510
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-35510: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-43234: Improper Control of Generation of Code
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...
CVE-2023-43234
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...
CVE-2023-43234
CVE-2023-43234 affects DedeBIZ v6.2.11. The vulnerability exists in the /admin/file_manage_control.php endpoint, exploitable via the $activepath and $filename parameters, enabling remote code execution. Multiple sources describe the root cause as improper handling/filtering of constructed snippet...
CVE-2023-43234
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...
CVE-2023-37839: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-37839
An arbitrary file upload vulnerability in /dede/filemanagecontrol.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2022-44118
dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...
CVE-2022-43196
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
Arbitrary file deletion
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...