Skip to contentDedecms vulnerabilities
Newest
- dedecmsAn arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109...CVE-2023-378399.8 Critical
- dedecmsDedeCMS co_do.php server-side request forgeryCVE-2023-35785.5 Medium
- dedecmsDedeCMS article_allowurl_edit.php code injectionCVE-2023-2928Public exploitEPSS 51.4%6.3 Medium
- dedecmsDedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby'...CVE-2023-317575.4 Medium
- dedecmsDedeCMS config.php UpDateMemberModCache unrestricted uploadCVE-2023-24246.3 Medium
- dedecmsAn issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to...CVE-2023-303807.5 High
- dedecmsDedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede...CVE-2023-277337.2 High
- dedecmsDedeCMS select_templets.php path traversalCVE-2023-20594.3 Medium
- dedecmsDedeCMS module_main.php GetSystemFile code injectionCVE-2023-20566.3 Medium
- dedecmsSQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute...CVE-2023-277097.2 High
- dedecmsSQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute...CVE-2023-277077.2 High
- dedecmsDedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the...CVE-2022-481405.4 Medium
- dedecmsdedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no...CVE-2022-464429.8 Critical
- dedecmsAn arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms...CVE-2022-431926.7 Medium
- dedecmsDedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows...CVE-2022-430318.8 High
- dedecmsDedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the...CVE-2022-409217.2 High
- dedecmsDedeCMS 5.7.98 has a file upload vulnerability in the background.CVE-2022-408867.2 High
- dedecmsDedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at ...CVE-2022-365836.1 Medium
- dedecmsDedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in...CVE-2022-355169.8 Critical
- dedecmsDedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in...CVE-2022-362167.2 High
- dedecmsDedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the...CVE-2022-34531EPSS 24.4%9.8 Critical
- dedecmsDedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via...CVE-2022-305086.5 Medium
- dedecmsDedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule...CVE-2022-233379.8 Critical
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-230445.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-230466.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364915.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364905.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364925.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364946.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364935.4 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364956.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364966.1 Medium
- dedecmsDedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in...CVE-2020-364976.1 Medium
- dedecmsAn arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows...CVE-2020-181149.8 Critical
- dedecmsThe plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP...CVE-2020-189178.8 High
- dedecmsSQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup...CVE-2020-221989.8 Critical
- dedecmsA XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an...CVE-2020-166325.4 Medium
- dedecmsDedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious...CVE-2021-320738.8 High
- dedecmsA Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that...CVE-2020-27533Public exploit5.4 Medium
- dedecmsA file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.CVE-2015-4553Public exploitEPSS 56.7%8.8 High
- dedecmsIn DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the...CVE-2019-100146.5 Medium
- dedecmsIn DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being...CVE-2019-89338.8 High
- dedecmsDedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php...CVE-2019-83627.5 High
- dedecmsuploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute...CVE-2019-62898.8 High
- dedecmsAn issue was discovered in DedeCMS V5.7 SP2. uploads/include/dialog/select_images_post.php allows...CVE-2018-201298.8 High
- dedecmsDedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter.CVE-2018-190619.8 Critical
- dedecmsReflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter.CVE-2018-187826.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via the /member/uploads_select.php f or keyword parameter.CVE-2018-187816.1 Medium
- dedecmsDedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp...CVE-2018-186086.1 Medium
- dedecmsReflected XSS exists in DedeCMS 5.7 SP2 via the /member/pm.php folder parameter.CVE-2018-185796.1 Medium
- Show moreLoading…