Login Request a demo
DE
Vendor
Dedecms
1 product with CVEs on record
179
CVEs
0
On KEV
4
New 30D
Products
DE
DedeCMS
Dedecms
9.8
179 CVEs0 on KEV4 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116253
New
DE
DedeCMS
Dedecms
7.3
0%
Oct 26DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection
CVE-2026-116063
New
DE
DedeCMS
Dedecms
4.7
0%
Oct 25DedeCMS update_guide.php require_once code injection
CVE-2021-48016
New
DE
DedeCMS
DedeCMS
9.8
0%
Oct 22DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
CVE-2014-125131
DE
DedeCMS
DedeCMS
6.1
0%
Oct 20DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php
CVE-2026-94004
DE
DedeCMS
Dedecms
7.3
1%
Sep 20DedeCMS mytag_js.php code injection
CVE-2026-76800
DE
DeDeCMS
Dedecms
6.3
0%
Aug 20DeDeCMS select_media_post.php unrestricted upload
CVE-2026-76783
DE
DeDeCMS
Dedecms
7.3
0%
Aug 20DeDeCMS advancedsearch.php sql injection
CVE-2026-19353
DE
DedeCMS
Dedecms
5.0
0%
Aug 9DedeCMS Installation Wizard index.php _4_Setup file inclusion
CVE-2026-15700
DE
DedeCMS
Dedecms
4.7
0%
Jul 14DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal
CVE-2026-15533
DE
DedeCMS
Dedecms
4.7
0%
Jul 13DedeCMS Column Management search.php code injection
CVE-2026-10608
DE
DedeCMS
Dedecms
7.3
0%
Jun 2DedeCMS carbuyaction.php RemoveXSS sql injection
CVE-2026-10607
DE
DedeCMS
Dedecms
7.3
0%
Jun 2DedeCMS flink.php dede_htmlspecialchars sql injection
CVE-2026-10606
DE
DedeCMS
Dedecms
7.3
0%
Jun 2DedeCMS Feedback feedback.php TrimMsg sql injection
CVE-2026-10581
DE
DedeCMS
Dedecms
6.3
0%
Jun 2DedeCMS download.php base64_decode server-side request forgery
CVE-2026-30643
DE
Dedecms
Dedecms
9.8
1%
Apr 1An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload
CVE-2026-29839
DE
Dedecms
Dedecms
8.8
0%
Mar 24DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php
CVE-2026-30694
DE
Dedecms
Dedecms
9.8
1%
Mar 19An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component
CVE-2024-30855
DE
Dedecms
Dedecms
8.8
0%
Dec 29DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/makehtml_list_action.php
CVE-2025-15004
DE
DedeCMS
Dedecms
8.8
0%
Dec 22DedeCMS freelist_main.php sql injection
CVE-2025-6335
DE
Dedecms
Dedecms
7.2
7%
Jun 20DedeCMS Template dedetag.class.php command injection
CVE-2025-5137
DE
Dedecms
Dedecms
7.2
1%
May 25DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection
CVE-2024-57241
DE
Dedecms
Dedecms
6.5
1%
Feb 11Dedecms 5.71sp1 and earlier is vulnerable to URL redirect
CVE-2024-12183
DE
Dedecms
Dedecms
5.4
0%
Dec 4A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116
CVE-2024-12182
DE
Dedecms
Dedecms
5.4
0%
Dec 4A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116
CVE-2024-12181
DE
Dedecms
Dedecms
5.4
0%
Dec 4A vulnerability classified as problematic was found in DedeCMS 5.7.116
CVE-2024-12180
DE
Dedecms
Dedecms
5.4
0%
Dec 4A vulnerability classified as problematic has been found in DedeCMS 5.7.116
CVE-2024-11138
DE
Dedecms
Dedecms
9.8
3%
Nov 12A vulnerability classified as problematic has been found in DedeCMS 5.7.116
CVE-2024-9076
DE
Dedecms
Dedecms
8.8
21%
Sep 22A vulnerability was found in DedeCMS up to 5.7.115
CVE-2024-46373
DE
Dedecms
Dedecms
8.8
1%
Sep 18Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend
CVE-2024-46372
DE
Dedecms
Dedecms
6.1
0%
Sep 18DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module
CVE-2024-42636
DE
Dedecms
Dedecms
7.2
1%
Aug 23DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath
CVE-2024-6940
DE
Dedecms
Dedecms
7.2
1%
Jul 21A vulnerability was found in DedeCMS 5.7.114
CVE-2024-35510
DE
Dedecms
Dedecms
9.8
1%
May 28An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file
CVE-2024-35375
DE
Dedecms
Dedecms
9.8
0%
May 23There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS
CVE-2024-34959
DE
Dedecms
Dedecms
5.5
0%
May 17DedeCMS V5.7.113 is vulnerable to Cross Site Scripting (XSS) via sys_data_replace.php
CVE-2024-4790
DE
Dedecms
Dedecms
7.5
1%
May 14A vulnerability classified as problematic has been found in DedeCMS 5.7.114
CVE-2024-34245
DE
Dedecms
Dedecms
6.5
1%
May 14An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php
CVE-2024-4594
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability, which was classified as problematic, was found in DedeCMS 5.7
CVE-2024-4593
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7
CVE-2024-4592
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability classified as problematic was found in DedeCMS 5.7
CVE-2024-4591
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability classified as problematic has been found in DedeCMS 5.7
CVE-2024-4590
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability was found in DedeCMS 5.7
CVE-2024-4589
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability was found in DedeCMS 5.7
CVE-2024-4588
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability was found in DedeCMS 5.7
CVE-2024-4587
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability was found in DedeCMS 5.7 and classified as problematic
CVE-2024-4586
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability has been found in DedeCMS 5.7 and classified as problematic
CVE-2024-4585
DE
Dedecms
Dedecms
4.3
0%
May 7A vulnerability, which was classified as problematic, was found in DedeCMS 5.7
CVE-2024-33749
DE
Dedecms
Dedecms
9.1
1%
May 6DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php
CVE-2024-33371
DE
Dedecms
Dedecms
6.1
0%
Apr 30Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to execute arbitrary code via the typeid parameter in the makehtml_list_action.php component
CVE-2024-33401
DE
Dedecms
Dedecms
4.4
0%
Apr 29Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter
CVE-2024-29660
DE
Dedecms
Dedecms
5.3
0%
Apr 25Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component
CVE-2024-29661
DE
Dedecms
Dedecms
9.8
1%
Apr 22A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload
CVE-2024-3686
DE
Dedecms
Dedecms
7.5
1%
Apr 12A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic
CVE-2024-3685
DE
Dedecms
Dedecms
9.8
1%
Apr 12A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8
CVE-2024-30965
DE
Dedecms
Dedecms
8.8
0%
Apr 2DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php
CVE-2024-30946
DE
Dedecms
Dedecms
5.5
0%
Apr 2DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/co_do.php
CVE-2024-3148
DE
Dedecms
Dedecms
8.8
1%
Apr 2A vulnerability, which was classified as critical, has been found in DedeCMS 5.7.112
CVE-2024-3147
DE
Dedecms
Dedecms
4.3
0%
Apr 2A vulnerability classified as problematic was found in DedeCMS 5.7
CVE-2024-3146
DE
Dedecms
Dedecms
4.3
0%
Apr 2A vulnerability classified as problematic has been found in DedeCMS 5.7
CVE-2024-3145
DE
Dedecms
Dedecms
4.3
0%
Apr 2A vulnerability was found in DedeCMS 5.7