Approved changes feed: RSS · Atom

cpe:2.3:a:dedecms:dedecms:5.7.115:*:*:*:*:*:*:*

part: a version: 5.7.115 update: *

VendorDedecms (f4393c97-317b-5cbd-a295-240ef710a9f7)
ProductDedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dedecms/dedecms purl2cpe 2026-06-01 10:15:15.818136

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-46373 vulnerable 2026-06-08 06:48:10.041769 Details available
Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
Published: 2024-09-18T00:00:00.000Z
Updated: 2024-09-19T18:34:36.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46372 vulnerable 2026-06-08 06:48:10.040313 Details available
DedeCMS 5.7.115 is vulnerable to Cross Site Scripting (XSS) via the advertisement code box in the advertisement management module.
Published: 2024-09-18T00:00:00.000Z
Updated: 2025-03-25T16:30:47.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-42636 vulnerable 2026-06-08 06:45:46.829856 Details available
DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.
Published: 2024-08-23T00:00:00.000Z
Updated: 2024-08-23T17:44:51.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.