4 matches found
CVE-2024-28682
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /dede/syscacheup.php...
CVE-2018-9175
DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...
CVE-2018-9175
DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselectmain.php because code within the database is accessible to uploads/dede/syscacheup.php...
DedeCMS Arbitrary PHP Code Execution Vulnerability
Weaving dream content management system DedeCms is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS 5.7 has an arbitrary PHP code execution vulnerability. The vulnerability arises because uploads/dede/syscacheup.php can acces...