Vulnerability index

Browse CVEs

145 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dedecms MEDIUM 5.5
CVE-2024-30946

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php.

No fix yet
Fix from $1,600 2024-04-02
Dedecms HIGH 8.8
CVE-2024-3148

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/mak…

Mitigation only
Fix from $1,950 2024-04-02
Dedecms CRITICAL 9.8
CVE-2024-29684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attack…

No fix yet
Fix from $2,300 2024-03-26
Dedecms HIGH 8.8
CVE-2024-28671

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28673

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms MEDIUM 6.3
CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.3
CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28676

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28677

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 5.4
CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 5.4
CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php

No fix yet
Fix from $1,950 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php

No fix yet
Fix from $1,950 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php

No fix yet
Fix from $1,950 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 5.5
CVE-2024-28666

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms HIGH 8.8
CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.

No fix yet
Fix from $1,950 2024-03-13
Dedecms MEDIUM 6.1
CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.

No fix yet
Fix from $1,600 2024-03-13
Dedecms MEDIUM 5.5
CVE-2024-28429

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php

No fix yet
Fix from $1,600 2024-03-13
Dedecms HIGH 8.8
CVE-2023-52047

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.

Mitigation only
Fix from $1,950 2024-02-28
Dedecms HIGH 8.8
CVE-2024-22895

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.

No fix yet
Fix from $1,950 2024-01-22
Dedecms CRITICAL 9.8
CVE-2023-7212

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the com…

Fix: after 5.7.112
Fix from $2,300 2024-01-07
Dedecms MEDIUM 6.1
CVE-2023-49494

DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php.

No fix yet
Fix from $1,600 2023-12-11