Approved changes feed: RSS · Atom

cpe:2.3:a:dedecms:dedecms:5.7.110:*:*:*:*:*:*:*

part: a version: 5.7.110 update: *

VendorDedecms (f4393c97-317b-5cbd-a295-240ef710a9f7)
ProductDedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dedecms/dedecms purl2cpe 2026-06-01 10:15:15.818127

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4747 vulnerable 2026-06-08 06:16:14.488982 DedeCMS tags.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of the argument tag_alias leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-238636.
Published: 2023-09-04T00:00:16.227Z
Updated: 2024-08-02T07:38:00.326Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.