EUVD-2020-23981

Malware in sbrugna...

EUVD-2020-23976

Malware in sbrugna...

CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via filemanageview.php?fmdo=newfile&activepath...

CVE-2024-42636

CVE-2024-42636 affects DedeCMS V5.7.115 with a command execution vulnerability exploitable via file_manage_view.php?fmdo=newfile&activepath. The connected sources (NVD, Red Hat, CNNVD, CVE list) confirm the vulnerability exists in this specific version; however, the technical details about the ro...

CVE-2022-48140

DedeCMS v5.7.97 is reported to have a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename. The issue is documented across multiple sources (e.g., CVE-2022-48140, NVD, RH, CNNVD, OpenVAS) with a CVSS v3.1 base score of 5.4 (Medium) and attributes: AV:...

CVE-2022-48140

DedeCMS v5.7.97 was discovered to contain a cross-site scripting XSS vulnerability in the component /filemanageview.php?fmdo=edit&filename...

CVE-2020-36490

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

CVE-2020-36490

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36490

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the activepath, keyword, tag, fmdo=x&filename, CKEditor and CKEditorFuncNum parameters...

CVE-2020-36490

CVE-2020-36490 affects DedeCMS v7.5 SP2; from the connected sources, the vulnerability is a set of cross-site scripting (XSS) flaws in the file_manage_view.php component that can be triggered through parameters activepath, keyword, tag, fmdo=x&filename, CKEditor, and CKEditorFuncNum. The root cau...

CVE-2020-36495

DedeCMS v7.5 SP2 contains multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php . The issue is triggered via input params filename , mid , userid , and templet’ . Exploitation details (payloads, exploit vectors, or in‑the‑wild activity) are not provided in the ...

CVE-2020-36495

DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component filemanageview.php via the filename, mid, userid, and templet' parameters...

DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Cross Site Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2194 Release Date: ============= 2020-04-07 Vulnerability Laboratory ID VL-ID: ===================================...