22 matches found
EUVD-2023-36048
Malicious code in bioql PyPI...
CVE-2024-4590
A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2024-4590
CVE-2024-4590 affects DedeCMS 5.7, with the vulnerable element in /src/dede/sys_info.php. The issue enables cross-site request forgery (CSRF) via manipulation of that file’s functionality. The attack is described as remotely launchable and the exploit has been disclosed publicly. Exploitation det...
Desdev DedeCMS Cross-Site Request Forgery Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...
CVE-2024-4590: Cross-Site Request Forgery (CSRF)
A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
Design/Logic Flaw
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757: Improper Neutralization of Input During Web Page Generation
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to v5.7.108 is vulnerable to XSS in sysinfo.php via parameters 'editcfgpowerby' and 'editcfgbeian'...
CVE-2023-31757
DedeCMS up to version 5.7.108 is vulnerable to cross-site scripting (XSS) in sys_info.php via the parameters edit___cfg_powerby and edit___cfg_beian. The underlying issue is an XSS flaw in how these query/POST parameters are processed, enabling attacker-supplied HTML/JS to be reflected in the adm...
CVE-2022-36215
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
Remote code execution
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...
CVE-2022-36215
CVE-2022-36215 affects DedeBIZ v6; a remote code execution flaw exists in the sys_info.php component. Public entries consistently describe remote code execution via that file, with the root cause at the sys_info.php module. Impact details are that arbitrary code execution could be achieved on the...
CVE-2022-36215
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...