DE
Product
DedeCMS
179
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 30High 57Medium 88Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27733 | 7.2 | Apr 17 | DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php Affected: 5.7.106 |
| CVE-2023-27709 | 7.2 | Mar 16 | SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint Affected: through 5.7.106 |
| CVE-2023-27707 | 7.2 | Mar 16 | SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint Affected: through 5.7.106 |
| CVE-2022-40921 | 7.2 | Oct 11 | DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php Affected: 5.7.99 |
| CVE-2022-40886 | 7.2 | Oct 3 | DedeCMS 5.7.98 has a file upload vulnerability in the background Affected: 5.7.98 |
| CVE-2022-36216 | 7.2 | Aug 17 | DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php Affected: 5.7.94 through 5.7.97 |
| CVE-2018-16784 | 7.2 | Sep 21 | DedeCMS 5.7 SP2 allows XML injection, and resultant remote code execution, via a "<file type='file' name='../" substring Affected: 5.7 |