DE
Product
DedeCMS
179
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 30High 57Medium 88Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6881 | 5.3 | Feb 12 | EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php Affected: 5.7 |
| CVE-2026-19353 | 5.0 | Aug 9 | DedeCMS Installation Wizard index.php _4_Setup file inclusion Affected: 5.7.118 UTF8SP2 |
| CVE-2026-116063 New | 4.7 | Oct 25 | DedeCMS update_guide.php require_once code injection Affected: 5.7.118 |
| CVE-2026-15700 | 4.7 | Jul 14 | DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal Affected: 5.7.118 |
| CVE-2026-15533 | 4.7 | Jul 13 | DedeCMS Column Management search.php code injection Affected: 5.7.118 |
| CVE-2024-33401 | 4.4 | Apr 29 | Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter Affected: 5.7.113 |
| CVE-2024-4594 | 4.3 | May 7 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4593 | 4.3 | May 7 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4592 | 4.3 | May 7 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4591 | 4.3 | May 7 | A vulnerability classified as problematic has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4590 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4589 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4588 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-4587 | 4.3 | May 7 | A vulnerability was found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-4586 | 4.3 | May 7 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-4585 | 4.3 | May 7 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3147 | 4.3 | Apr 2 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3146 | 4.3 | Apr 2 | A vulnerability classified as problematic has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3145 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3144 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-3143 | 4.3 | Apr 2 | A vulnerability was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2823 | 4.3 | Mar 22 | A vulnerability has been found in DedeCMS 5.7 and classified as problematic Affected: 5.7 |
| CVE-2024-2822 | 4.3 | Mar 22 | A vulnerability, which was classified as problematic, was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2821 | 4.3 | Mar 22 | A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2024-2820 | 4.3 | Mar 22 | A vulnerability classified as problematic was found in DedeCMS 5.7 Affected: 5.7 |
| CVE-2011-5200 | – | Sep 23 | Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or… Affected: 5.6 |
| CVE-2010-1097 | – | Mar 24 | include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of… Affected: 5.5 |
| CVE-2009-3806 | – | Oct 27 | SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter Affected: 5.1 |
| CVE-2009-2270 | – | Jul 1 | Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in… Affected: 5.3 |