CVE-2024-52769

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-52769

DedeBIZ version v6.3.0 is affected by an arbitrary file upload vulnerability in the /admin/friendlink_edit component (API endpoint). This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. As a temporary workaround, it is recommended to disable the /admin/fri...

CVE-2024-2821

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. Affected by this issue is some unknown functionality of the file /src/dede/friendlinkedit.php. The manipulation of the argument id leads to cross-site request forgery. The attack may be launched remotely. The...

PT-2024-22336

Name of the Vulnerable Software and Affected Versions DedeCMS version 5.7 Description A problematic issue has been found in DedeCMS, affecting some unknown functionality of the file /src/dede/friendlink edit.php. The manipulation of the id argument leads to cross-site request forgery. The attack...