Approved changes feed: RSS · Atom

cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:*

part: a version: 5.7 update: -

VendorDedecms (f4393c97-317b-5cbd-a295-240ef710a9f7)
ProductDedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dedecms/dedecms purl2cpe 2026-06-01 10:15:15.818107

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4594 vulnerable 2026-06-08 06:50:18.217137 DedeCMS sys_safe.php cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the file /src/dede/sys_safe.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263316. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:31:04.240Z
Updated: 2024-08-01T20:47:41.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4593 vulnerable 2026-06-08 06:50:18.216716 DedeCMS sys_multiserv.php cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7. This issue affects some unknown processing of the file /src/dede/sys_multiserv.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263315. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:00:07.531Z
Updated: 2024-08-01T20:47:41.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4592 vulnerable 2026-06-08 06:50:18.216180 DedeCMS sys_group_edit.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/sys_group_edit.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263314 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T14:00:05.564Z
Updated: 2024-08-01T20:47:41.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4591 vulnerable 2026-06-08 06:50:18.215495 DedeCMS sys_group_add.php cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sys_group_add.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T13:31:06.262Z
Updated: 2024-08-01T20:47:41.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4590 vulnerable 2026-06-08 06:50:18.215089 DedeCMS sys_info.php cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sys_info.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263312. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-05-07T13:31:04.724Z
Updated: 2024-08-01T20:47:41.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4589 vulnerable 2026-06-08 06:50:18.214519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4588 vulnerable 2026-06-08 06:50:18.213963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4587 vulnerable 2026-06-08 06:50:18.213546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4586 vulnerable 2026-06-08 06:50:18.212831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4585 vulnerable 2026-06-08 06:50:18.212312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3147 vulnerable 2026-06-08 06:41:52.575981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3146 vulnerable 2026-06-08 06:41:52.575564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3145 vulnerable 2026-06-08 06:41:52.574980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3144 vulnerable 2026-06-08 06:41:52.574383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3143 vulnerable 2026-06-08 06:41:52.572862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30965 vulnerable 2026-06-08 06:35:30.762735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30946 vulnerable 2026-06-08 06:35:30.746663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30855 vulnerable 2026-06-08 06:35:30.683843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2823 vulnerable 2026-06-08 06:35:27.443821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2822 vulnerable 2026-06-08 06:35:27.443265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2821 vulnerable 2026-06-08 06:35:27.442615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2820 vulnerable 2026-06-08 06:35:27.438808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29684 vulnerable 2026-06-08 06:33:29.237990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29661 vulnerable 2026-06-08 06:33:29.232777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29660 vulnerable 2026-06-08 06:33:29.232384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28684 vulnerable 2026-06-08 06:33:27.104625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28683 vulnerable 2026-06-08 06:33:27.104201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28682 vulnerable 2026-06-08 06:33:27.103652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28681 vulnerable 2026-06-08 06:33:27.103147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28680 vulnerable 2026-06-08 06:33:27.102578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28679 vulnerable 2026-06-08 06:33:27.102080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28678 vulnerable 2026-06-08 06:33:27.101338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28677 vulnerable 2026-06-08 06:33:27.101004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28676 vulnerable 2026-06-08 06:33:27.100363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28675 vulnerable 2026-06-08 06:33:27.099764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28673 vulnerable 2026-06-08 06:33:27.099360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28672 vulnerable 2026-06-08 06:33:27.098698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28671 vulnerable 2026-06-08 06:33:27.097904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28670 vulnerable 2026-06-08 06:33:27.097347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28669 vulnerable 2026-06-08 06:33:27.096966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28668 vulnerable 2026-06-08 06:33:27.096279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28667 vulnerable 2026-06-08 06:33:27.095683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28666 vulnerable 2026-06-08 06:33:27.095224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28665 vulnerable 2026-06-08 06:33:27.094851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28432 vulnerable 2026-06-08 06:33:26.994641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28431 vulnerable 2026-06-08 06:33:26.994226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28430 vulnerable 2026-06-08 06:33:26.993648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28429 vulnerable 2026-06-08 06:33:26.991974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43275 vulnerable 2026-06-08 06:11:11.089011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-22198 vulnerable 2026-06-08 05:22:31.313129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8362 vulnerable 2026-06-08 05:14:23.950209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6881 vulnerable 2026-06-08 05:11:54.356171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4553 vulnerable 2026-06-08 05:06:40.168829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.