DedeCMS 5.7.114
Approved changes feed: RSS · Atom
cpe:2.3:a:dedecms:dedecms:5.7.114:*:*:*:*:*:*:*part: a version: 5.7.114 update: *
| Vendor | Dedecms (f4393c97-317b-5cbd-a295-240ef710a9f7) |
|---|---|
| Product | Dedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dedecms/dedecms |
purl2cpe | 2026-06-01 10:15:15.818134 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6940 |
vulnerable | 2026-06-08 06:58:20.798610 |
DedeCMS article_template_rand.php code injection
MEDIUM (4.7)
A vulnerability was found in DedeCMS 5.7.114. It has been classified as critical. This affects an unknown part of the file article_template_rand.php. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271995. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-07-21T05:31:07.684Z
Updated: 2024-08-01T21:45:38.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4790 |
vulnerable | 2026-06-08 06:50:18.645069 |
DedeCMS path traversal
MEDIUM (4.3)
A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipulation of the argument filename with the input ../../../../../etc/passwd leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263889 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-11T23:31:03.662Z
Updated: 2024-08-01T20:55:09.994Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35510 |
vulnerable | 2026-06-08 06:39:42.027884 |
Details available
An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file.
Published: 2024-05-28T19:35:21.599Z
Updated: 2025-02-13T15:58:51.921Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35375 |
vulnerable | 2026-06-08 06:39:41.902501 |
Details available
There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS
Published: 2024-05-23T18:53:33.398Z
Updated: 2025-02-13T15:58:36.527Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34245 |
vulnerable | 2026-06-08 06:37:33.090144 |
Details available
An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php.
Published: 2024-05-10T16:19:45.844Z
Updated: 2025-02-13T15:53:20.749Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33749 |
vulnerable | 2026-06-08 06:37:32.117998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.