Vulnerability index

Browse CVEs

113 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Dedecms HIGH 8.8
CVE-2026-29839

DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.

Mitigation only
Fix from $1,950 2026-03-24
Dedecms HIGH 8.8
CVE-2024-30855

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php.

No fix yet
Fix from $1,950 2025-12-29
Dedecms HIGH 7.2
CVE-2025-5137

A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?a…

No fix yet
Fix from $1,950 2025-05-25
Dedecms MEDIUM 6.5
CVE-2024-57241

Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in UR…

Mitigation only
Fix from $1,600 2025-02-11
Dedecms CRITICAL 9.8
CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_a…

Mitigation only
Fix from $2,300 2024-11-12
Dedecms HIGH 8.8
CVE-2024-46373

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.

Mitigation only
Fix from $1,950 2024-09-18
Dedecms MEDIUM 6.1
CVE-2024-46372

DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.

Mitigation only
Fix from $1,600 2024-09-18
Dedecms HIGH 7.2
CVE-2024-42636

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.

Mitigation only
Fix from $1,950 2024-08-23
Dedecms HIGH 7.2
CVE-2024-6940

A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php.…

No fix yet
Fix from $1,950 2024-07-21
Dedecms CRITICAL 9.8
CVE-2024-35510

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading …

No fix yet
Fix from $2,300 2024-05-28
Dedecms CRITICAL 9.8
CVE-2024-35375

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

Mitigation only
Fix from $2,300 2024-05-23
Dedecms MEDIUM 5.5
CVE-2024-34959

DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php.

No fix yet
Fix from $1,600 2024-05-17
Dedecms HIGH 7.5
CVE-2024-4790

A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. …

Mitigation only
Fix from $1,950 2024-05-14
Dedecms MEDIUM 6.5
CVE-2024-34245

An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js…

No fix yet
Fix from $1,600 2024-05-14
Dedecms CRITICAL 9.1
CVE-2024-33749

DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.

No fix yet
Fix from $2,300 2024-05-06
Dedecms MEDIUM 6.1
CVE-2024-33371

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_l…

No fix yet
Fix from $1,600 2024-04-30
Dedecms MEDIUM 5.3
CVE-2024-29660

Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.ph…

Mitigation only
Fix from $1,600 2024-04-25
Dedecms CRITICAL 9.8
CVE-2024-29661

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.

Mitigation only
Fix from $2,300 2024-04-22
Dedecms HIGH 7.5
CVE-2024-3686

A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of t…

No fix yet
Fix from $1,950 2024-04-12
Dedecms CRITICAL 9.8
CVE-2024-3685

A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php…

Mitigation only
Fix from $2,300 2024-04-12
Dedecms MEDIUM 5.5
CVE-2024-30946

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php.

No fix yet
Fix from $1,600 2024-04-02
Dedecms HIGH 8.8
CVE-2024-3148

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/mak…

Mitigation only
Fix from $1,950 2024-04-02
Dedecms CRITICAL 9.8
CVE-2024-29684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attack…

No fix yet
Fix from $2,300 2024-03-26
Dedecms HIGH 8.8
CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28673

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms MEDIUM 6.3
CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.3
CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php.

No fix yet
Fix from $1,600 2024-03-13