Approved changes feed: RSS · Atom
cpe:2.3:a:dedecms:dedecms:5.7:*:*:*:*:*:*:*part: a version: 5.7 update: *
| Vendor | Dedecms (f4393c97-317b-5cbd-a295-240ef710a9f7) |
|---|---|
| Product | Dedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-125131 |
vulnerable | 2026-11-03 10:14:09.252944 |
DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php
MEDIUM (6.1)
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.php that close the generated script tag and inject JavaScript, which executes in the victim's browser. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-23.
Published: 2026-10-20T20:31:21.514Z
Updated: 2026-10-21T15:52:20.155Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3146 |
vulnerable | 2026-06-08 06:41:52.575390 |
DedeCMS makehtml_rss_action.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/makehtml_rss_action.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-258921 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-02T01:31:03.976Z
Updated: 2024-08-01T20:05:07.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3144 |
vulnerable | 2026-06-08 06:41:52.574299 |
DedeCMS makehtml_spec.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in DedeCMS 5.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /src/dede/makehtml_spec.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-02T01:00:04.567Z
Updated: 2024-08-01T20:05:07.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29684 |
vulnerable | 2026-06-08 06:33:29.237921 |
Details available
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to execute arbitrary code.
Published: 2024-03-26T00:00:00.000Z
Updated: 2024-08-06T14:16:25.293Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28682 |
vulnerable | 2026-06-08 06:33:27.103586 |
Details available
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.
Published: 2024-03-13T00:00:00.000Z
Updated: 2024-08-28T13:33:58.960Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28675 |
vulnerable | 2026-06-08 06:33:27.099702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28673 |
vulnerable | 2026-06-08 06:33:27.099140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28669 |
vulnerable | 2026-06-08 06:33:27.096749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28668 |
vulnerable | 2026-06-08 06:33:27.096089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28667 |
vulnerable | 2026-06-08 06:33:27.095614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28665 |
vulnerable | 2026-06-08 06:33:27.094774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28432 |
vulnerable | 2026-06-08 06:33:26.994577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28431 |
vulnerable | 2026-06-08 06:33:26.994138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28430 |
vulnerable | 2026-06-08 06:33:26.993560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43275 |
vulnerable | 2026-06-08 06:11:11.082658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9175 |
vulnerable | 2026-06-08 05:12:07.908270 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9174 |
vulnerable | 2026-06-08 05:12:07.907966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9134 |
vulnerable | 2026-06-08 05:12:07.863448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7700 |
vulnerable | 2026-06-08 05:12:03.998259 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6910 |
vulnerable | 2026-06-08 05:11:54.395059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12046 |
vulnerable | 2026-06-08 05:10:39.767544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12045 |
vulnerable | 2026-06-08 05:10:39.765644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.