CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2018/03/27 6:29 p.m.•30 views

Cross site request forgery (csrf)

DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code...

6.8CVSS8.9AI score0.74118EPSS

SaveExploits2References1Affected Software1

Cvelist•added 2018/03/27 6:00 p.m.•46 views

CVE-2018-7700

DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code...

9AI score0.74118EPSS

SaveExploits2References1

CVE•added 2018/03/27 6:00 p.m.•89 views

CVE-2018-7700

DedeCMS 5.7 (including 5.7SP2) is vulnerable to CSRF that can lead to arbitrary code execution via the partcode parameter in tag_test_action.php (runphp field with PHP code). Exploitation appears in the wild (2025), and remediation is to apply security patches/update to a newer DedeCMS version. A...

8.8CVSS8.8AI score0.74118EPSS

SaveIn wildExploits2References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/03/27 12:00 a.m.•6 views

CVE-2018-7700: Cross-Site Request Forgery (CSRF)

DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code...

8.8CVSS8AI score0.74118EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by