DE
Product
DedeCMS
181
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 30High 57Medium 90Low 0
Watch
Add DedeCMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29660 | 5.3 | Apr 25 | Cross Site Scripting vulnerability in DedeCMS v.5.7 allows a local attacker to execute arbitrary code via a crafted payload to the stepselect_main.php component Affected: 5.7 |
| CVE-2023-2059 | 5.3 | Apr 14 | DedeCMS select_templets.php path traversal Affected: 5.7.87 |
| CVE-2018-6881 | 5.3 | Feb 12 | EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php Affected: 5.7 |
| CVE-2026-19353 | 5.0 | Aug 9 | DedeCMS Installation Wizard index.php _4_Setup file inclusion Affected: 5.7.118 UTF8SP2 |
| CVE-2026-116063 New | 4.7 | Oct 25 | DedeCMS update_guide.php require_once code injection Affected: 5.7.118 |
| CVE-2026-15700 | 4.7 | Jul 14 | DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal Affected: 5.7.118 |
| CVE-2026-15533 | 4.7 | Jul 13 | DedeCMS Column Management search.php code injection Affected: 5.7.118 |
| CVE-2024-33401 | 4.4 | Apr 29 | Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter Affected: 5.7.113 |
| CVE-2024-4594 | 4.3 | May 7 | DedeCMS sys_safe.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4593 | 4.3 | May 7 | DedeCMS sys_multiserv.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4592 | 4.3 | May 7 | DedeCMS sys_group_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4591 | 4.3 | May 7 | DedeCMS sys_group_add.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4590 | 4.3 | May 7 | DedeCMS sys_info.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4589 | 4.3 | May 7 | DedeCMS mytag_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4588 | 4.3 | May 7 | DedeCMS mytag_add.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4587 | 4.3 | May 7 | DedeCMS tpl.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4586 | 4.3 | May 7 | DedeCMS shops_delivery.php cross-site request forgery Affected: 5.7 |
| CVE-2024-4585 | 4.3 | May 7 | DedeCMS member_type.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3147 | 4.3 | Apr 2 | DedeCMS makehtml_map.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3146 | 4.3 | Apr 2 | DedeCMS makehtml_rss_action.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3145 | 4.3 | Apr 2 | DedeCMS makehtml_js_action.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3144 | 4.3 | Apr 2 | DedeCMS makehtml_spec.php cross-site request forgery Affected: 5.7 |
| CVE-2024-3143 | 4.3 | Apr 2 | DedeCMS member_rank.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2823 | 4.3 | Mar 22 | DedeCMS mda_main.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2822 | 4.3 | Mar 22 | DedeCMS vote_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2821 | 4.3 | Mar 22 | DedeCMS friendlink_edit.php cross-site request forgery Affected: 5.7 |
| CVE-2024-2820 | 4.3 | Mar 22 | DedeCMS baidunews.php cross-site request forgery Affected: 5.7 |
| CVE-2011-5200 | – | Sep 23 | Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) list.php, (2) members.php, or… Affected: 5.6 |
| CVE-2010-1097 | – | Mar 24 | include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.auto_start is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of… Affected: 5.5 |
| CVE-2009-3806 | – | Oct 27 | SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands via the arcurl parameter Affected: 5.1 |
| CVE-2009-2270 | – | Jul 1 | Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in… Affected: 5.3 |