24 matches found
EUVD-2020-23976
Malware in sbrugna...
EUVD-2020-23981
Malware in sbrugna...
CVE-2020-36495
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...
CVE-2024-42636
DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...
CVE-2024-42636
DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...
CVE-2024-42636
DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...
CVE-2024-42636
DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...
CVE-2024-42636
DedeCMS (Dream Weaving Content Management System) version V5.7.115 is susceptible to a command execution vulnerability. The root cause is the improper neutralization of special elements used in a command, accessible via the file_manage_view.php?fmdo=newfile&activepath endpoint. This flaw could al...
CVE-2024-42636: Improper Neutralization of Special Elements used in a Command
DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...
The vulnerability of the file_manage_view.php component in the DedeCMS content management system, which stems from the lack of protective measures for website structures, allows attackers to carry out XSS attacks.
The vulnerability of the filemanageview.php component in the DedeCMS content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...
CVE-2022-48140
DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...
CVE-2022-48140: Improper Neutralization of Input During Web Page Generation
DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...
CVE-2022-48140
DedeCMS v5.7.97 is reported to have a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename. The issue is documented across multiple sources (e.g., CVE-2022-48140, NVD, RH, CNNVD, OpenVAS) with a CVSS v3.1 base score of 5.4 (Medium) and attributes: AV:...
CVE-2020-36490
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
CVE-2020-36495
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...
CVE-2020-36490
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
CVE-2020-36490
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...
CVE-2020-36490
CVE-2020-36490 affects DedeCMS v7.5 SP2; from the connected sources, the vulnerability is a set of cross-site scripting (XSS) flaws in the file_manage_view.php component that can be triggered through parameters activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum. The root cau...
CVE-2020-36495
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...
CVE-2020-36495
DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php . The issue is triggered via input params filename , mid , userid , and templet’ . Exploitation details (payloads, exploit vectors, or in‑the‑wild activity) are not provided in the ...