Browse CVEs

HIGH 8.8 CVE-2026-29839 DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php. Dedecms Mitigation only Fix from $1,9502026-03-24 HIGH 8.8 CVE-2024-30855 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php. Dedecms No fix yet Fix from $1,9502025-12-29 HIGH 7.2 CVE-2025-5137 A vulnerability was found in DedeCMS 5.7.117. It has been classified as critical. Affected is an unknown function of the file dede/sys_verifies.php?a… Dedecms No fix yet Fix from $1,9502025-05-25 MEDIUM 6.5 CVE-2024-57241 Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in UR… Dedecms Mitigation only Fix from $1,6002025-02-11 CRITICAL 9.8 CVE-2024-11138 A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_a… Dedecms Mitigation only Fix from $2,3002024-11-12 HIGH 8.8 CVE-2024-46373 Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend. Dedecms Mitigation only Fix from $1,9502024-09-18 MEDIUM 6.1 CVE-2024-46372 DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module. Dedecms Mitigation only Fix from $1,6002024-09-18 HIGH 7.2 CVE-2024-42636 DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath. Dedecms Mitigation only Fix from $1,9502024-08-23 HIGH 7.2 CVE-2024-6940 A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php.… Dedecms No fix yet Fix from $1,9502024-07-21 CRITICAL 9.8 CVE-2024-35510 An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading … Dedecms No fix yet Fix from $2,3002024-05-28 CRITICAL 9.8 CVE-2024-35375 There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS Dedecms Mitigation only Fix from $2,3002024-05-23 MEDIUM 5.5 CVE-2024-34959 DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php. Dedecms No fix yet Fix from $1,6002024-05-17 HIGH 7.5 CVE-2024-4790 A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. … Dedecms Mitigation only Fix from $1,9502024-05-14 MEDIUM 6.5 CVE-2024-34245 An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js… Dedecms No fix yet Fix from $1,6002024-05-14 CRITICAL 9.1 CVE-2024-33749 DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php. Dedecms No fix yet Fix from $2,3002024-05-06 MEDIUM 6.1 CVE-2024-33371 Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_l… Dedecms No fix yet Fix from $1,6002024-04-30 MEDIUM 5.3 CVE-2024-29660 Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.ph… Dedecms Mitigation only Fix from $1,6002024-04-25 CRITICAL 9.8 CVE-2024-29661 A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload. Dedecms Mitigation only Fix from $2,3002024-04-22 HIGH 7.5 CVE-2024-3686 A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of t… Dedecms No fix yet Fix from $1,9502024-04-12 CRITICAL 9.8 CVE-2024-3685 A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselect_main.php… Dedecms Mitigation only Fix from $2,3002024-04-12 MEDIUM 5.5 CVE-2024-30946 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php. Dedecms No fix yet Fix from $1,6002024-04-02 HIGH 8.8 CVE-2024-3148 A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/mak… Dedecms Mitigation only Fix from $1,9502024-04-02 CRITICAL 9.8 CVE-2024-29684 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attack… Dedecms No fix yet Fix from $2,3002024-03-26 HIGH 8.8 CVE-2024-28671 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php. Dedecms No fix yet Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-28673 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php. Dedecms No fix yet Fix from $1,9502024-03-13 MEDIUM 6.3 CVE-2024-28678 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.3 CVE-2024-28682 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28670 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28676 DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28677 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php. Dedecms No fix yet Fix from $1,6002024-03-13