DE
Product
DedeCMS
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 24Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11138 | 9.8 | Nov 12 | DedeCMS friendlink_add.php unrestricted upload Affected: 5.7.116 |
| CVE-2024-3685 | 9.8 | Apr 12 | DedeCMS stepselect_main.php sql injection Affected: 5.7.112-UTF8 |
| CVE-2023-7212 | 9.8 | Jan 7 | DeDeCMS Backend file_class.php unrestricted upload Affected: 5.7.112 |
| CVE-2023-4747 | 9.8 | Sep 4 | DedeCMS tags.php sql injection Affected: 5.7.110 |
| CVE-2023-3578 | 9.8 | Jul 10 | DedeCMS co_do.php server-side request forgery Affected: 5.7.109 |
| CVE-2023-2056 | 9.8 | Apr 14 | DedeCMS module_main.php GetSystemFile code injection Affected: 5.7.0; 5.7.1; 5.7.2; 5.7.3; 5.7.4; 5.7.5; +34 more |
| CVE-2024-9076 | 8.8 | Sep 22 | DedeCMS article_string_mix.php os command injection Affected: 5.7.115 |
| CVE-2024-3148 | 8.8 | Apr 2 | DedeCMS makehtml_archives_action.php sql injection Affected: 5.7.112 |
| CVE-2023-5301 | 8.8 | Sep 30 | DedeCMS album_add.php AddMyAddon os command injection Affected: 5.7.111 |
| CVE-2023-5022 | 8.8 | Sep 17 | DedeCMS select_templets_post.php absolute path traversal Affected: 5.0; 5.1; 5.2; 5.3; 5.4; 5.5; +2 more |
| CVE-2023-2928 | 8.8 | May 27 | DedeCMS article_allowurl_edit.php code injection Affected: 5.7.106 |
| CVE-2023-2424 | 8.8 | Apr 29 | DedeCMS config.php UpDateMemberModCache unrestricted upload Affected: 5.7.106 |
| CVE-2024-4790 | 7.5 | May 11 | DedeCMS path traversal Affected: 5.7.114 |
| CVE-2024-3686 | 7.5 | Apr 12 | DedeCMS update_guide.php path traversal Affected: 5.7.112-UTF8 |
| CVE-2025-6335 | 7.2 | Jun 20 | DedeCMS Template dedetag.class.php command injection Affected: 5.7.0; 5.7.1; 5.7.2 |
| CVE-2025-5137 | 7.2 | May 25 | DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection Affected: 5.7.117 |
| CVE-2024-6940 | 7.2 | Jul 21 | DedeCMS article_template_rand.php code injection Affected: 5.7.114 |
| CVE-2024-12183 | 5.4 | Dec 4 | DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scripting Affected: 5.7.116 |
| CVE-2024-12182 | 5.4 | Dec 4 | DedeCMS soft_add.php cross site scripting Affected: 5.7.116 |
| CVE-2024-12181 | 5.4 | Dec 4 | DedeCMS SWF File uploads_add.php cross site scripting Affected: 5.7.116 |
| CVE-2024-12180 | 5.4 | Dec 4 | DedeCMS article_add.php cross site scripting Affected: 5.7.116 |
| CVE-2023-2059 | 5.3 | Apr 14 | DedeCMS select_templets.php path traversal Affected: 5.7.87 |
| CVE-2024-4594 | 4.3 | May 7 | DedeCMS sys_safe.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4593 | 4.3 | May 7 | DedeCMS sys_multiserv.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4592 | 4.3 | May 7 | DedeCMS sys_group_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4591 | 4.3 | May 7 | DedeCMS sys_group_add.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4590 | 4.3 | May 7 | DedeCMS sys_info.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4589 | 4.3 | May 7 | DedeCMS mytag_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4588 | 4.3 | May 7 | DedeCMS mytag_add.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4587 | 4.3 | May 7 | DedeCMS tpl.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4586 | 4.3 | May 7 | DedeCMS shops_delivery.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4585 | 4.3 | May 7 | DedeCMS member_type.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3147 | 4.3 | Apr 2 | DedeCMS makehtml_map.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3146 | 4.3 | Apr 2 | DedeCMS makehtml_rss_action.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3145 | 4.3 | Apr 2 | DedeCMS makehtml_js_action.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3144 | 4.3 | Apr 2 | DedeCMS makehtml_spec.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3143 | 4.3 | Apr 2 | DedeCMS member_rank.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2823 | 4.3 | Mar 22 | DedeCMS mda_main.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2822 | 4.3 | Mar 22 | DedeCMS vote_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2821 | 4.3 | Mar 22 | DedeCMS friendlink_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2820 | 4.3 | Mar 22 | DedeCMS baidunews.php cross-site request forgery Affected: 5.7 |
Showing 41