Dedecms vulnerabilities

Products

• Dedecms 170

Newest

• dedecms DedeCMS < 5.7 File Inclusion via plus/carbuyaction.php CVE-2010-20125 8.7 HighOctober 30, 2026
• dedecms DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php CVE-2021-48016 9.3 CriticalOctober 22, 2026
• dedecms DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php CVE-2014-125131 5.1 MediumOctober 20, 2026
• dedecms An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup... CVE-2026-30643 9.8 CriticalApril 1, 2026
• dedecms DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in ... CVE-2026-29839 8.8 HighMarch 24, 2026
• dedecms An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via... CVE-2026-30694 9.8 CriticalMarch 19, 2026
• dedecms DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src... CVE-2024-30855 8.8 HighDecember 29, 2025
• dedecms DedeCMS freelist_main.php sql injection CVE-2025-15004 5.3 MediumDecember 22, 2025
• dedecms DedeCMS Template dedetag.class.php command injection CVE-2025-6335 Public exploit 5.1 MediumJune 20, 2025
• dedecms DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection CVE-2025-5137 5.1 MediumMay 25, 2025
• dedecms Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error... CVE-2024-57241 Public exploit 6.5 MediumFebruary 11, 2025
• dedecms DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting CVE-2024-12183 5.3 MediumDecember 4, 2024
• dedecms DedeCMS soft_add.php cross site scripting CVE-2024-12182 5.3 MediumDecember 4, 2024
• dedecms DedeCMS SWF File uploads_add.php cross site scripting CVE-2024-12181 5.3 MediumDecember 4, 2024
• dedecms DedeCMS article_add.php cross site scripting CVE-2024-12180 5.3 MediumDecember 4, 2024
• dedecms DedeCMS friendlink_add.php unrestricted upload CVE-2024-11138 5.1 MediumNovember 12, 2024
• dedecms DedeCMS article_string_mix.php os command injection CVE-2024-9076 EPSS 20.8% 5.1 MediumSeptember 22, 2024
• dedecms Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. CVE-2024-46373 8.8 HighSeptember 18, 2024
• dedecms DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the... CVE-2024-46372 6.1 MediumSeptember 18, 2024
• dedecms DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile... CVE-2024-42636 7.2 HighAugust 23, 2024
• dedecms DedeCMS article_template_rand.php code injection CVE-2024-6940 5.1 MediumJuly 21, 2024
• dedecms An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file. CVE-2024-35510 9.8 CriticalMay 28, 2024
• dedecms There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS CVE-2024-35375 9.8 CriticalMay 23, 2024
• dedecms DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. CVE-2024-34959 5.5 MediumMay 17, 2024
• dedecms DedeCMS path traversal CVE-2024-4790 5.3 MediumMay 11, 2024
• dedecms An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read... CVE-2024-34245 6.5 MediumMay 10, 2024
• dedecms DedeCMS sys_safe.php cross-site request forgery CVE-2024-4594 4.3 MediumMay 7, 2024
• dedecms DedeCMS sys_multiserv.php cross-site request forgery CVE-2024-4593 4.3 MediumMay 7, 2024
• dedecms DedeCMS sys_group_edit.php cross-site request forgery CVE-2024-4592 4.3 MediumMay 7, 2024
• dedecms DedeCMS sys_group_add.php cross-site request forgery CVE-2024-4591 4.3 MediumMay 7, 2024
• dedecms DedeCMS sys_info.php cross-site request forgery CVE-2024-4590 4.3 MediumMay 7, 2024
• dedecms DedeCMS mytag_edit.php cross-site request forgery CVE-2024-4589 4.3 MediumMay 7, 2024
• dedecms DedeCMS mytag_add.php cross-site request forgery CVE-2024-4588 4.3 MediumMay 7, 2024
• dedecms DedeCMS tpl.php cross-site request forgery CVE-2024-4587 4.3 MediumMay 7, 2024
• dedecms DedeCMS shops_delivery.php cross-site request forgery CVE-2024-4586 4.3 MediumMay 7, 2024
• dedecms DedeCMS member_type.php cross-site request forgery CVE-2024-4585 4.3 MediumMay 7, 2024
• dedecms DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php. CVE-2024-33749 9.1 CriticalMay 6, 2024
• dedecms Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute... CVE-2024-33371 6.1 MediumApril 30, 2024
• dedecms Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary... CVE-2024-33401 4.4 MediumApril 29, 2024
• dedecms Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary... CVE-2024-29660 5.3 MediumApril 25, 2024
• dedecms A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via... CVE-2024-29661 9.8 CriticalApril 22, 2024
• dedecms DedeCMS update_guide.php path traversal CVE-2024-3686 4.3 MediumApril 12, 2024
• dedecms DedeCMS stepselect_main.php sql injection CVE-2024-3685 6.3 MediumApril 12, 2024
• dedecms DedeCMS makehtml_archives_action.php sql injection CVE-2024-3148 6.3 MediumApril 2, 2024
• dedecms DedeCMS makehtml_map.php cross-site request forgery CVE-2024-3147 4.3 MediumApril 2, 2024
• dedecms DedeCMS makehtml_rss_action.php cross-site request forgery CVE-2024-3146 4.3 MediumApril 2, 2024
• dedecms DedeCMS makehtml_js_action.php cross-site request forgery CVE-2024-3145 4.3 MediumApril 2, 2024
• dedecms DedeCMS makehtml_spec.php cross-site request forgery CVE-2024-3144 4.3 MediumApril 2, 2024
• dedecms DedeCMS member_rank.php cross-site request forgery CVE-2024-3143 4.3 MediumApril 2, 2024
• dedecms DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src... CVE-2024-30965 8.8 HighApril 2, 2024
• Show olderLoading…