Skip to contentDedecms vulnerabilities
Newest
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src...CVE-2024-309465.5 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src...CVE-2024-296849.8 Critical
- dedecmsDedeCMS mda_main.php cross-site request forgeryCVE-2024-28234.3 Medium
- dedecmsDedeCMS vote_edit.php cross-site request forgeryCVE-2024-28224.3 Medium
- dedecmsDedeCMS friendlink_edit.php cross-site request forgeryCVE-2024-28214.3 Medium
- dedecmsDedeCMS baidunews.php cross-site request forgeryCVE-2024-28204.3 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286848.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.CVE-2024-286836.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286826.3 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286816.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286806.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo...CVE-2024-286796.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286786.3 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286776.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede...CVE-2024-286766.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286758.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286738.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286725.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286718.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286706.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...CVE-2024-286695.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286686.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286676.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286665.5 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-286658.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-284328.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-284318.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-284306.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...CVE-2024-284295.5 Medium
- racktables project racktables, dedecms +1 moreReflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local...CVE-2023-494536.1 Medium
- dedecmsCross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a...CVE-2024-253276.1 Medium
- dedecmsDedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.CVE-2023-520478.8 High
- dedecmsDedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.CVE-2024-228958.8 High
- dedecmsDeDeCMS Backend file_class.php unrestricted uploadCVE-2023-72124.7 Medium
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...CVE-2023-494946.1 Medium
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...CVE-2023-494936.1 Medium
- dedecmsDedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability...CVE-2023-494926.1 Medium
- dedecmsCross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management...CVE-2023-432758.8 High
- dedecmsDedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.CVE-2023-480685.4 Medium
- dedecmsDedeCMS album_add.php AddMyAddon os command injectionCVE-2023-53014.7 Medium
- dedecmsAn arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier...CVE-2023-432268.8 High
- dedecmsDedeCMS select_templets_post.php absolute path traversalCVE-2023-50225.5 Medium
- dedecmsDedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.CVE-2023-407849.8 Critical
- dedecmsDedeCMS tags.php sql injectionCVE-2023-47476.3 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS)...CVE-2023-408775.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS)...CVE-2023-408765.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS)...CVE-2023-408755.4 Medium
- dedecmsDedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS)...CVE-2023-408745.4 Medium
- dedecmsDedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).CVE-2023-362988.8 High
- dedecmsRemote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run...CVE-2023-348429.8 Critical
- Show moreLoading…