DedeCMS 5.7 Service Pack 2
Approved changes feed: RSS · Atom
cpe:2.3:a:dedecms:dedecms:5.7:sp2:*:*:*:*:*:*part: a version: 5.7 update: sp2
| Vendor | Dedecms (f4393c97-317b-5cbd-a295-240ef710a9f7) |
|---|---|
| Product | Dedecms (30184c10-e156-5bab-a5cd-b52d2eecf28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/dedecms/dedecms |
purl2cpe | 2026-06-01 10:15:15.827106 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32073 |
vulnerable | 2026-06-08 05:31:54.674266 |
Details available
DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution.
Published: 2021-05-14T23:20:08.000Z
Updated: 2024-08-03T23:17:29.085Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18917 |
vulnerable | 2026-06-08 05:20:57.130739 |
Details available
The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control.
Published: 2021-08-24T19:34:10.000Z
Updated: 2024-08-04T14:08:30.602Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18114 |
vulnerable | 2026-06-08 05:20:56.845848 |
Details available
An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format.
Published: 2021-08-27T20:30:10.000Z
Updated: 2024-08-04T14:00:48.793Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-16632 |
vulnerable | 2026-06-08 05:19:27.941496 |
Details available
A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter.
Published: 2021-05-14T23:20:13.000Z
Updated: 2024-08-04T13:45:34.384Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8933 |
vulnerable | 2026-06-08 05:14:24.684686 |
Details available
In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequence of steps: visiting the management page, clicking on the template, clicking on Default Template Management, clicking on New Template, and modifying the filename from ../index.html to ../index.php.
Published: 2019-02-19T02:00:00.000Z
Updated: 2024-09-16T20:43:13.298Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8362 |
vulnerable | 2026-06-08 05:14:23.951366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6289 |
vulnerable | 2026-06-08 05:14:10.459512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10014 |
vulnerable | 2026-06-08 05:12:21.916497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20129 |
vulnerable | 2026-06-08 05:11:26.691705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19061 |
vulnerable | 2026-06-08 05:11:15.306803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18782 |
vulnerable | 2026-06-08 05:11:14.683632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18781 |
vulnerable | 2026-06-08 05:11:14.683131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18608 |
vulnerable | 2026-06-08 05:11:14.359783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18579 |
vulnerable | 2026-06-08 05:11:14.287834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18578 |
vulnerable | 2026-06-08 05:11:14.287352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16786 |
vulnerable | 2026-06-08 05:11:05.482679 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16785 |
vulnerable | 2026-06-08 05:11:05.482375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16784 |
vulnerable | 2026-06-08 05:11:05.481972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12046 |
vulnerable | 2026-06-08 05:10:39.767677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12045 |
vulnerable | 2026-06-08 05:10:39.767002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10375 |
vulnerable | 2026-06-08 05:10:26.625108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.