Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/20 12:17 p.m.•18 views

CVE-2026-94004

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00516EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/20 11:45 a.m.•69 views

CVE-2026-94004 DedeCMS mytag_js.php code injection

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS0.00516EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/20 11:45 a.m.•18 views

CVE-2026-94004 DedeCMS mytag_js.php code injection

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS6.7AI score0.00516EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/20 11:45 a.m.•21 views

EUVD-2026-83732

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS6.8AI score0.00516EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/20 11:45 a.m.•50 views

CVE-2026-94004

DedeCMS versions up to 5.7.118 are affected by a code injection vulnerability in the file plus/mytag_js.php . The root cause is the manipulation of the aid argument within an unknown function of that file. The vulnerability is exploitable remotely with no privileges and no user interaction requir...

7.5CVSS6.7AI score0.00516EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•7 views

CVE-2026-94004: Improper Control of Generation of Code

A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...

7.5CVSS6.8AI score0.00516EPSS
SaveExploits0References3
Rows per page
Query Builder