Dedecms

Dedecms

167 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-7212

  • EPSS 0.04%
  • Veröffentlicht 07.01.2024 17:15:08
  • Zuletzt bearbeitet 21.11.2024 08:45:31

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack re...

6.1

CVE-2023-49494

Exploit
  • EPSS 2.24%
  • Veröffentlicht 11.12.2023 21:15:07
  • Zuletzt bearbeitet 21.11.2024 08:33:29

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.

6.1

CVE-2023-49492

Exploit
  • EPSS 0.17%
  • Veröffentlicht 07.12.2023 16:15:07
  • Zuletzt bearbeitet 21.11.2024 08:33:28

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.php.

6.1

CVE-2023-49493

Exploit
  • EPSS 0.17%
  • Veröffentlicht 07.12.2023 16:15:07
  • Zuletzt bearbeitet 28.05.2025 16:15:32

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.

8.8

CVE-2023-43275

Exploit
  • EPSS 0.13%
  • Veröffentlicht 16.11.2023 05:15:29
  • Zuletzt bearbeitet 21.11.2024 08:23:55

Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form.

5.4

CVE-2023-48068

Exploit
  • EPSS 0.08%
  • Veröffentlicht 13.11.2023 16:15:28
  • Zuletzt bearbeitet 21.11.2024 08:31:04

DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.

8.8

CVE-2023-5301

Exploit
  • EPSS 0.59%
  • Veröffentlicht 30.09.2023 11:15:15
  • Zuletzt bearbeitet 21.11.2024 08:41:29

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be init...

8.8

CVE-2023-43226

Exploit
  • EPSS 0.16%
  • Veröffentlicht 28.09.2023 20:15:10
  • Zuletzt bearbeitet 21.11.2024 08:23:51

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

8.8

CVE-2023-5022

  • EPSS 0.1%
  • Veröffentlicht 17.09.2023 06:15:07
  • Zuletzt bearbeitet 21.11.2024 08:40:54

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to ...

9.8

CVE-2023-40784

  • EPSS 0.17%
  • Veröffentlicht 12.09.2023 15:15:24
  • Zuletzt bearbeitet 21.11.2024 08:20:07

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.