Dedecms

Dedecms

167 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-4747

  • EPSS 0.05%
  • Veröffentlicht 04.09.2023 01:15:07
  • Zuletzt bearbeitet 21.11.2024 08:35:53

A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of the argument tag_alias leads to sql injection. The attack can be initiated remotely. The e...

5.4

CVE-2023-40874

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:14

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters.

5.4

CVE-2023-40875

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:14

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters.

5.4

CVE-2023-40876

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:14

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_add.php via the title parameter.

5.4

CVE-2023-40877

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:15

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freelist_edit.php via the title parameter.

8.8

CVE-2023-36298

Exploit
  • EPSS 6.59%
  • Veröffentlicht 03.08.2023 15:15:28
  • Zuletzt bearbeitet 21.11.2024 08:09:30

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).

9.8

CVE-2023-34842

  • EPSS 2.14%
  • Veröffentlicht 31.07.2023 14:15:10
  • Zuletzt bearbeitet 21.11.2024 08:07:37

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php.

9.8

CVE-2023-37839

Exploit
  • EPSS 0.87%
  • Veröffentlicht 13.07.2023 22:15:09
  • Zuletzt bearbeitet 21.11.2024 08:12:18

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.

9.8

CVE-2023-3578

Exploit
  • EPSS 81.13%
  • Veröffentlicht 10.07.2023 16:15:56
  • Zuletzt bearbeitet 21.11.2024 08:17:35

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file co_do.php. The manipulation of the argument rssurl leads to server-side request forgery. The exploit has been ...

8.8

CVE-2023-2928

  • EPSS 66.06%
  • Veröffentlicht 27.05.2023 10:15:09
  • Zuletzt bearbeitet 21.11.2024 07:59:35

A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/article_allowurl_edit.php. The manipulation of the argument allurls leads to cod...