Dedecms

Dedecms

167 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-12180

Exploit
  • EPSS 0.11%
  • Veröffentlicht 04.12.2024 22:15:22
  • Zuletzt bearbeitet 10.12.2024 16:34:52

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack...

5.4

CVE-2024-12181

Exploit
  • EPSS 0.12%
  • Veröffentlicht 04.12.2024 22:15:22
  • Zuletzt bearbeitet 10.12.2024 16:29:18

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads...

9.8

CVE-2024-11138

  • EPSS 0.17%
  • Veröffentlicht 12.11.2024 18:15:17
  • Zuletzt bearbeitet 10.12.2024 21:11:45

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to init...

8.8

CVE-2024-9076

Exploit
  • EPSS 1.86%
  • Veröffentlicht 22.09.2024 01:15:12
  • Zuletzt bearbeitet 28.11.2024 07:15:05

A vulnerability was found in DedeCMS up to 5.7.115. It has been rated as critical. This issue affects some unknown processing of the file /dede/article_string_mix.php. The manipulation leads to os command injection. The attack may be initiated remote...

6.1

CVE-2024-46372

  • EPSS 0.2%
  • Veröffentlicht 18.09.2024 21:15:13
  • Zuletzt bearbeitet 25.03.2025 17:16:10

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.

8.8

CVE-2024-46373

  • EPSS 0.38%
  • Veröffentlicht 18.09.2024 21:15:13
  • Zuletzt bearbeitet 31.03.2025 18:53:55

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.

7.2

CVE-2024-42636

  • EPSS 0.09%
  • Veröffentlicht 23.08.2024 16:15:06
  • Zuletzt bearbeitet 31.03.2025 18:49:02

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.

7.2

CVE-2024-6940

Exploit
  • EPSS 0.09%
  • Veröffentlicht 21.07.2024 06:15:04
  • Zuletzt bearbeitet 21.11.2024 09:50:35

A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploi...

9.8

CVE-2024-35510

Exploit
  • EPSS 0.43%
  • Veröffentlicht 28.05.2024 20:16:35
  • Zuletzt bearbeitet 01.04.2025 18:05:15

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file.

9.8

CVE-2024-35375

  • EPSS 0.27%
  • Veröffentlicht 23.05.2024 19:16:01
  • Zuletzt bearbeitet 01.04.2025 18:05:20

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS