DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php

DedeCMS freelist_main.php sql injection

A vulnerability was found in DedeCMS up to 5.7.115

Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php

A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php

Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php

Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php, allows attackers to create crafted web pages due to a…

A vulnerability classified as critical was found in DedeCMS 5.7.111

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file

A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE)

A vulnerability was found in DedeCMS up to 5.7.106

A vulnerability was found in DedeCMS 5.7.106 and classified as critical

DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords

The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an…

DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution

A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell

In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this…

uploads/include/dialog/select_soft.php in DedeCMS V57_UTF8_SP2 allows remote attackers to execute arbitrary PHP code by uploading with a safe file extension and then renaming with…

An issue was discovered in DedeCMS V5.7 SP2

XML injection vulnerability exists in the file of DedeCMS V5.7 SP2 version, which can be utilized by attackers to create script file to obtain webshell

file_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by renaming an arbitrary file under uploads/userup to a .php file under the web root to…

DedeCMS 5.7 has CSRF with an impact of arbitrary code execution, because the partcode parameter in a tag_test_action.php request can specify a runphp field in conjunction with PHP…

DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php

A vulnerability classified as problematic has been found in DedeCMS 5.7.114

A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic

An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal

DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip=1 request with a…

DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str parameters, as…

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php

DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection

DedeCMS mytag_js.php code injection

DeDeCMS advancedsearch.php sql injection

DedeCMS carbuyaction.php RemoveXSS sql injection

DedeCMS flink.php dede_htmlspecialchars sql injection

DedeCMS Feedback feedback.php TrimMsg sql injection

DedeCMS Template dedetag.class.php command injection

DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection

DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath

A vulnerability was found in DedeCMS 5.7.114