Vulnerabilities (CVE)

Filtered by vendor Dedecms Subscribe
Total 164 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-28682 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.3 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.
CVE-2024-28683 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.
CVE-2024-28430 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.
CVE-2024-28431 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.
CVE-2024-28432 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.
CVE-2024-28665 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php
CVE-2024-28666 1 Dedecms 1 Dedecms 2025-04-01 N/A 5.5 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php
CVE-2024-28667 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php
CVE-2024-28668 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
CVE-2024-28675 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php
CVE-2024-28684 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php
CVE-2024-28669 1 Dedecms 1 Dedecms 2025-04-01 N/A 5.4 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php.
CVE-2024-28670 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.
CVE-2024-28671 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php.
CVE-2024-28672 1 Dedecms 1 Dedecms 2025-04-01 N/A 5.4 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php.
CVE-2024-28673 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.
CVE-2024-28676 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede/article_edit.php.
CVE-2024-28677 1 Dedecms 1 Dedecms 2025-04-01 N/A 6.1 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/article_keywords_main.php.
CVE-2024-28429 1 Dedecms 1 Dedecms 2025-04-01 N/A 5.5 MEDIUM
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php
CVE-2023-52047 1 Dedecms 1 Dedecms 2025-04-01 N/A 8.8 HIGH
Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.