Skip to contentDedecms vulnerabilities
Newest
- dedecmsDedeCMS 5.7 SP2 allows XSS via the plus/qrcode.php type parameter.CVE-2018-185786.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus...CVE-2018-167866.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type=...CVE-2018-167847.2 High
- dedecmsXML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized...CVE-2018-167858.8 High
- dedecmsDedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede...CVE-2018-120467.5 High
- dedecmsDedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede...CVE-2018-120459.8 Critical
- dedecmsA file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2,...CVE-2018-103759.8 Critical
- dedecmsDedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to...CVE-2018-91759.8 Critical
- dedecmssys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the...CVE-2018-91749.8 Critical
- dedecmsfile_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by...CVE-2018-91348.8 High
- dedecmsDedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter...CVE-2018-7700EPSS 74.1%8.8 High
- dedecmsDedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include...CVE-2018-6910EPSS 18.8%7.5 High
- phome empirecms, dedecms +1 moreEmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a...CVE-2018-68815.3 Medium
- dedecmsDedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.CVE-2017-17731EPSS 13.3%9.8 Critical
- dedecmsDedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.CVE-2017-177309.8 Critical
- dedecmsDedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code...CVE-2017-177278.8 High
- dedecmsMultiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to...CVE-2011-5200Public exploit7.5 High
- dedecmsinclude/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote...CVE-2010-10976.8 Medium
- dedecmsSQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute...CVE-2009-3806Public exploit7.5 High
- dedecmsUnrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote...CVE-2009-22706.8 Medium