Approved changes feed: RSS · Atom
cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Dedecms (f4393c97-317b-5cbd-a295-240ef710a9f7) |
|---|---|
| Product | Dedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dedecms/dedecms |
purl2cpe | 2026-06-01 10:15:15.814348 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-48016 |
vulnerable | 2026-11-03 10:23:11.883479 |
DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
CRITICAL (9.8)
DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
Published: 2026-10-22T10:57:31.176Z
Updated: 2026-10-29T02:06:05.908Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116253 |
vulnerable | 2026-11-03 10:15:22.014569 |
DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection
HIGH (7.3)
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/ad_js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotely.
Published: 2026-10-26T09:30:05.471Z
Updated: 2026-10-26T16:31:53.722Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116063 |
vulnerable | 2026-11-03 10:15:21.747232 |
DedeCMS update_guide.php require_once code injection
MEDIUM (4.7)
A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2026-10-25T17:45:12.345Z
Updated: 2026-10-26T16:39:15.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-125131 |
vulnerable | 2026-11-03 10:14:09.250805 |
DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php
MEDIUM (6.1)
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag and inject JavaScript, which executes in the victim's browser. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-23.
Published: 2026-10-20T20:31:21.514Z
Updated: 2026-10-21T15:52:20.155Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-94004 |
vulnerable | 2026-10-13 12:28:38.736491 |
DedeCMS mytag_js.php code injection
HIGH (7.3)
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytag_js.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2026-09-20T11:45:04.431Z
Updated: 2026-09-21T16:46:51.089Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19353 |
vulnerable | 2026-09-16 04:34:15.240660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15700 |
vulnerable | 2026-07-29 00:26:18.390304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15533 |
vulnerable | 2026-07-29 00:26:18.266187 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30694 |
vulnerable | 2026-06-08 07:57:14.158455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30643 |
vulnerable | 2026-06-08 07:57:14.136265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10608 |
vulnerable | 2026-06-08 07:47:13.831201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10607 |
vulnerable | 2026-06-08 07:47:13.830849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10606 |
vulnerable | 2026-06-08 07:47:13.830534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10581 |
vulnerable | 2026-06-08 07:47:13.824929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6335 |
vulnerable | 2026-06-08 07:43:14.860185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15004 |
vulnerable | 2026-06-08 07:06:35.518601 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9076 |
vulnerable | 2026-06-08 07:00:26.611675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46373 |
vulnerable | 2026-06-08 06:48:10.041596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42636 |
vulnerable | 2026-06-08 06:45:46.827579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3686 |
vulnerable | 2026-06-08 06:43:51.214707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3685 |
vulnerable | 2026-06-08 06:43:51.212017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33401 |
vulnerable | 2026-06-08 06:37:31.096427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30965 |
vulnerable | 2026-06-08 06:35:30.762668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2823 |
vulnerable | 2026-06-08 06:35:27.443661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2822 |
vulnerable | 2026-06-08 06:35:27.443191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2821 |
vulnerable | 2026-06-08 06:35:27.442427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28683 |
vulnerable | 2026-06-08 06:33:27.103951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28681 |
vulnerable | 2026-06-08 06:33:27.102984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28680 |
vulnerable | 2026-06-08 06:33:27.102421 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28677 |
vulnerable | 2026-06-08 06:33:27.100704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28676 |
vulnerable | 2026-06-08 06:33:27.100172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28672 |
vulnerable | 2026-06-08 06:33:27.098345 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28671 |
vulnerable | 2026-06-08 06:33:27.097736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28670 |
vulnerable | 2026-06-08 06:33:27.097287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28666 |
vulnerable | 2026-06-08 06:33:27.095157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28429 |
vulnerable | 2026-06-08 06:33:26.988726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25327 |
vulnerable | 2026-06-08 06:31:22.797355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12183 |
vulnerable | 2026-06-08 06:23:51.404970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12182 |
vulnerable | 2026-06-08 06:23:51.404328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12181 |
vulnerable | 2026-06-08 06:23:51.403794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12180 |
vulnerable | 2026-06-08 06:23:51.403049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11138 |
vulnerable | 2026-06-08 06:23:48.855895 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7212 |
vulnerable | 2026-06-08 06:21:57.305750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5022 |
vulnerable | 2026-06-08 06:19:40.712528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49453 |
vulnerable | 2026-06-08 06:14:29.110781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43226 |
vulnerable | 2026-06-08 06:11:11.026796 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40877 |
vulnerable | 2026-06-08 06:11:04.698972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40876 |
vulnerable | 2026-06-08 06:11:04.698592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40875 |
vulnerable | 2026-06-08 06:11:04.698080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40874 |
vulnerable | 2026-06-08 06:11:04.697553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34842 |
vulnerable | 2026-06-08 06:06:25.937174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2928 |
vulnerable | 2026-06-08 06:02:43.667458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2056 |
vulnerable | 2026-06-08 06:02:41.328918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27709 |
vulnerable | 2026-06-08 05:57:42.211107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27707 |
vulnerable | 2026-06-08 05:57:42.210694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46442 |
vulnerable | 2026-06-08 05:50:38.913974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36216 |
vulnerable | 2026-06-08 05:46:06.444535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35516 |
vulnerable | 2026-06-08 05:46:04.944123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8362 |
vulnerable | 2026-06-08 05:14:23.949487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12046 |
vulnerable | 2026-06-08 05:10:39.767518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12045 |
vulnerable | 2026-06-08 05:10:39.764804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17731 |
vulnerable | 2026-06-08 05:09:09.802887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17730 |
vulnerable | 2026-06-08 05:09:09.802585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17727 |
vulnerable | 2026-06-08 05:09:09.802190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4553 |
vulnerable | 2026-06-08 05:06:40.167973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.