DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php

An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload

An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component

A vulnerability classified as problematic has been found in DedeCMS 5.7.116

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS

A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload

A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to execute arbitrary code

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php

A vulnerability classified as critical was found in DedeCMS 5.7.110

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to /dede/tpl.php

An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file

A vulnerability classified as critical was found in DedeCMS 5.7.109

A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical

dedecms <=V5.7.102 is vulnerable to SQL Injection

DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php

DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php

DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter

An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format

SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php

DedeCMS 5.7 SP2 has SQL Injection via the dede\co_do.php ids parameter

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated…

A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbitrary PHP code via…

DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselect_main.php because code within the database is accessible to…

sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc are under an…

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php

DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php

DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php

DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php

DedeCMS freelist_main.php sql injection

A vulnerability was found in DedeCMS up to 5.7.115

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php

Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a…

A vulnerability classified as critical was found in DedeCMS 5.7.111

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical