Browse CVEs

MEDIUM 5.5 CVE-2024-30946 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php. Dedecms No fix yet Fix from $1,6002024-04-02 HIGH 8.8 CVE-2024-3148 A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112. This issue affects some unknown processing of the file dede/mak… Dedecms Mitigation only Fix from $1,9502024-04-02 CRITICAL 9.8 CVE-2024-29684 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attack… Dedecms No fix yet Fix from $2,3002024-03-26 HIGH 8.8 CVE-2024-28671 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php. Dedecms No fix yet Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-28673 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php. Dedecms No fix yet Fix from $1,9502024-03-13 MEDIUM 6.3 CVE-2024-28678 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.3 CVE-2024-28682 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28670 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28676 DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28677 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28679 DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28680 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28681 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28683 DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 5.4 CVE-2024-28669 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 5.4 CVE-2024-28672 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 HIGH 8.8 CVE-2024-28675 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php Dedecms No fix yet Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-28684 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php Dedecms No fix yet Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-28665 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php Dedecms No fix yet Fix from $1,9502024-03-13 MEDIUM 6.1 CVE-2024-28667 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 6.1 CVE-2024-28668 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 5.5 CVE-2024-28666 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php Dedecms No fix yet Fix from $1,6002024-03-13 HIGH 8.8 CVE-2024-28431 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php. Dedecms No fix yet Fix from $1,9502024-03-13 HIGH 8.8 CVE-2024-28432 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php. Dedecms No fix yet Fix from $1,9502024-03-13 MEDIUM 6.1 CVE-2024-28430 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php. Dedecms No fix yet Fix from $1,6002024-03-13 MEDIUM 5.5 CVE-2024-28429 DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php Dedecms No fix yet Fix from $1,6002024-03-13 HIGH 8.8 CVE-2023-52047 Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager. Dedecms Mitigation only Fix from $1,9502024-02-28 HIGH 8.8 CVE-2024-22895 DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. Dedecms No fix yet Fix from $1,9502024-01-22 CRITICAL 9.8 CVE-2023-7212 A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file file_class.php of the com… Dedecms after 5.7.112 Fix from $2,3002024-01-07 MEDIUM 6.1 CVE-2023-49494 DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEditor.php. Dedecms No fix yet Fix from $1,6002023-12-11