DedeCMS 5.7
Approved changes feed: RSS · Atom
cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:*part: a version: 5.7 update: -
| Vendor | Dedecms (f4393c97-317b-5cbd-a295-240ef710a9f7) |
|---|---|
| Product | Dedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dedecms/dedecms |
purl2cpe | 2026-06-01 10:15:15.818107 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-4594 |
vulnerable | 2026-06-08 06:50:18.217137 |
DedeCMS sys_safe.php cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the file /src/dede/sys_safe.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263316. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:31:04.240Z
Updated: 2024-08-01T20:47:41.314Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4593 |
vulnerable | 2026-06-08 06:50:18.216716 |
DedeCMS sys_multiserv.php cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sys_multiserv.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263315. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:00:07.531Z
Updated: 2024-08-01T20:47:41.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4592 |
vulnerable | 2026-06-08 06:50:18.216180 |
DedeCMS sys_group_edit.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/sys_group_edit.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263314 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:00:05.564Z
Updated: 2024-08-01T20:47:41.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4591 |
vulnerable | 2026-06-08 06:50:18.215495 |
DedeCMS sys_group_add.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sys_group_add.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T13:31:06.262Z
Updated: 2024-08-01T20:47:41.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4590 |
vulnerable | 2026-06-08 06:50:18.215089 |
DedeCMS sys_info.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sys_info.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263312. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T13:31:04.724Z
Updated: 2024-08-01T20:47:41.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4589 |
vulnerable | 2026-06-08 06:50:18.214519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4588 |
vulnerable | 2026-06-08 06:50:18.213963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4587 |
vulnerable | 2026-06-08 06:50:18.213546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4586 |
vulnerable | 2026-06-08 06:50:18.212831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4585 |
vulnerable | 2026-06-08 06:50:18.212312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3147 |
vulnerable | 2026-06-08 06:41:52.575981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3146 |
vulnerable | 2026-06-08 06:41:52.575564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3145 |
vulnerable | 2026-06-08 06:41:52.574980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3144 |
vulnerable | 2026-06-08 06:41:52.574383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3143 |
vulnerable | 2026-06-08 06:41:52.572862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30965 |
vulnerable | 2026-06-08 06:35:30.762735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30946 |
vulnerable | 2026-06-08 06:35:30.746663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30855 |
vulnerable | 2026-06-08 06:35:30.683843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2823 |
vulnerable | 2026-06-08 06:35:27.443821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2822 |
vulnerable | 2026-06-08 06:35:27.443265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2821 |
vulnerable | 2026-06-08 06:35:27.442615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2820 |
vulnerable | 2026-06-08 06:35:27.438808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29684 |
vulnerable | 2026-06-08 06:33:29.237990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29661 |
vulnerable | 2026-06-08 06:33:29.232777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29660 |
vulnerable | 2026-06-08 06:33:29.232384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28684 |
vulnerable | 2026-06-08 06:33:27.104625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28683 |
vulnerable | 2026-06-08 06:33:27.104201 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28682 |
vulnerable | 2026-06-08 06:33:27.103652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28681 |
vulnerable | 2026-06-08 06:33:27.103147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28680 |
vulnerable | 2026-06-08 06:33:27.102578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28679 |
vulnerable | 2026-06-08 06:33:27.102080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28678 |
vulnerable | 2026-06-08 06:33:27.101338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28677 |
vulnerable | 2026-06-08 06:33:27.101004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28676 |
vulnerable | 2026-06-08 06:33:27.100363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28675 |
vulnerable | 2026-06-08 06:33:27.099764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28673 |
vulnerable | 2026-06-08 06:33:27.099360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28672 |
vulnerable | 2026-06-08 06:33:27.098698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28671 |
vulnerable | 2026-06-08 06:33:27.097904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28670 |
vulnerable | 2026-06-08 06:33:27.097347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28669 |
vulnerable | 2026-06-08 06:33:27.096966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28668 |
vulnerable | 2026-06-08 06:33:27.096279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28667 |
vulnerable | 2026-06-08 06:33:27.095683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28666 |
vulnerable | 2026-06-08 06:33:27.095224 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28665 |
vulnerable | 2026-06-08 06:33:27.094851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28432 |
vulnerable | 2026-06-08 06:33:26.994641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28431 |
vulnerable | 2026-06-08 06:33:26.994226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28430 |
vulnerable | 2026-06-08 06:33:26.993648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28429 |
vulnerable | 2026-06-08 06:33:26.991974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43275 |
vulnerable | 2026-06-08 06:11:11.089011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22198 |
vulnerable | 2026-06-08 05:22:31.313129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8362 |
vulnerable | 2026-06-08 05:14:23.950209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6881 |
vulnerable | 2026-06-08 05:11:54.356171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4553 |
vulnerable | 2026-06-08 05:06:40.168829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.