Dedecms

Dedecms

164 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-49493

Exploit
  • EPSS 0.17%
  • Veröffentlicht 07.12.2023 16:15:07
  • Zuletzt bearbeitet 28.05.2025 16:15:32

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.

8.8

CVE-2023-43275

Exploit
  • EPSS 0.13%
  • Veröffentlicht 16.11.2023 05:15:29
  • Zuletzt bearbeitet 21.11.2024 08:23:55

Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form.

5.4

CVE-2023-48068

Exploit
  • EPSS 0.08%
  • Veröffentlicht 13.11.2023 16:15:28
  • Zuletzt bearbeitet 21.11.2024 08:31:04

DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.

8.8

CVE-2023-5301

Exploit
  • EPSS 0.59%
  • Veröffentlicht 30.09.2023 11:15:15
  • Zuletzt bearbeitet 21.11.2024 08:41:29

A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be init...

8.8

CVE-2023-43226

Exploit
  • EPSS 0.16%
  • Veröffentlicht 28.09.2023 20:15:10
  • Zuletzt bearbeitet 21.11.2024 08:23:51

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.

8.8

CVE-2023-5022

  • EPSS 0.1%
  • Veröffentlicht 17.09.2023 06:15:07
  • Zuletzt bearbeitet 21.11.2024 08:40:54

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to ...

9.8

CVE-2023-40784

  • EPSS 0.17%
  • Veröffentlicht 12.09.2023 15:15:24
  • Zuletzt bearbeitet 21.11.2024 08:20:07

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.

9.8

CVE-2023-4747

  • EPSS 0.05%
  • Veröffentlicht 04.09.2023 01:15:07
  • Zuletzt bearbeitet 21.11.2024 08:35:53

A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of the argument tag_alias leads to sql injection. The attack can be initiated remotely. The e...

5.4

CVE-2023-40874

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:14

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_add.php via the votename and voteitem1 parameters.

5.4

CVE-2023-40875

Exploit
  • EPSS 0.07%
  • Veröffentlicht 24.08.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:20:14

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/vote_edit.php via the votename and votenote parameters.