Show filters
114 Total Results
Displaying 61-70 of 114
Sort by:
Attacker Value
Unknown
CVE-2022-40886
Disclosure Date: October 03, 2022 (last updated February 24, 2025)
DedeCMS 5.7.98 has a file upload vulnerability in the background.
0
Attacker Value
Unknown
CVE-2022-36583
Disclosure Date: September 01, 2022 (last updated February 24, 2025)
DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters.
0
Attacker Value
Unknown
CVE-2022-36216
Disclosure Date: August 17, 2022 (last updated February 24, 2025)
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.
0
Attacker Value
Unknown
CVE-2022-35516
Disclosure Date: August 17, 2022 (last updated February 24, 2025)
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.
0
Attacker Value
Unknown
CVE-2022-34531
Disclosure Date: July 29, 2022 (last updated October 08, 2023)
DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.
0
Attacker Value
Unknown
CVE-2022-30508
Disclosure Date: May 26, 2022 (last updated February 23, 2025)
DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter.
0
Attacker Value
Unknown
CVE-2022-23337
Disclosure Date: February 14, 2022 (last updated February 23, 2025)
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
0
Attacker Value
Unknown
CVE-2020-36493
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and `CKEditorFuncNum` parameters.
0
Attacker Value
Unknown
CVE-2020-36497
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
Attacker Value
Unknown
CVE-2020-23046
Disclosure Date: October 22, 2021 (last updated February 23, 2025)
DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters.
0
