agentprime: dedecms

agentprime: dedecmsEvery new CVE for dedecms.https://agentprime.io/CVE-2010-20125: DedeCMS < 5.7 File Inclusion via plus/carbuyaction.phphttps://agentprime.io/advisories/CVE-2010-20125/https://agentprime.io/advisories/CVE-2010-20125/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:23:34 GMTCVECVE-2026-116253: DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injectionhttps://agentprime.io/advisories/CVE-2026-116253/https://agentprime.io/advisories/CVE-2026-116253/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 09:30:05 GMTCVECVE-2026-116063: DedeCMS update_guide.php require_once code injectionhttps://agentprime.io/advisories/CVE-2026-116063/https://agentprime.io/advisories/CVE-2026-116063/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 17:45:12 GMTCVECVE-2021-48016: DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.phphttps://agentprime.io/advisories/CVE-2021-48016/https://agentprime.io/advisories/CVE-2021-48016/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:57:31 GMTCVEcriticalCVE-2014-125131: DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.phphttps://agentprime.io/advisories/CVE-2014-125131/https://agentprime.io/advisories/CVE-2014-125131/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:31:21 GMTCVECVE-2026-94004: DedeCMS mytag_js.php code injectionhttps://agentprime.io/advisories/CVE-2026-94004/https://agentprime.io/advisories/CVE-2026-94004/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 11:45:04 GMTCVECVE-2026-76800: DeDeCMS select_media_post.php unrestricted uploadhttps://agentprime.io/advisories/CVE-2026-76800/https://agentprime.io/advisories/CVE-2026-76800/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 02:00:43 GMTCVECVE-2026-76783: DeDeCMS advancedsearch.php sql injectionhttps://agentprime.io/advisories/CVE-2026-76783/https://agentprime.io/advisories/CVE-2026-76783/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 00:15:35 GMTCVECVE-2026-19353: DedeCMS Installation Wizard index.php _4_Setup file inclusionhttps://agentprime.io/advisories/CVE-2026-19353/https://agentprime.io/advisories/CVE-2026-19353/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 09 Aug 2026 12:45:08 GMTCVECVE-2026-15700: DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversalhttps://agentprime.io/advisories/CVE-2026-15700/https://agentprime.io/advisories/CVE-2026-15700/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 16:15:07 GMTCVECVE-2026-15533: DedeCMS Column Management search.php code injectionhttps://agentprime.io/advisories/CVE-2026-15533/https://agentprime.io/advisories/CVE-2026-15533/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 04:45:06 GMTCVECVE-2026-10608: DedeCMS carbuyaction.php RemoveXSS sql injectionhttps://agentprime.io/advisories/CVE-2026-10608/https://agentprime.io/advisories/CVE-2026-10608/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 18:00:10 GMTCVECVE-2026-10607: DedeCMS flink.php dede_htmlspecialchars sql injectionhttps://agentprime.io/advisories/CVE-2026-10607/https://agentprime.io/advisories/CVE-2026-10607/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 17:45:05 GMTCVECVE-2026-10606: DedeCMS Feedback feedback.php TrimMsg sql injectionhttps://agentprime.io/advisories/CVE-2026-10606/https://agentprime.io/advisories/CVE-2026-10606/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 16:30:08 GMTCVECVE-2026-10581: DedeCMS download.php base64_decode server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-10581/https://agentprime.io/advisories/CVE-2026-10581/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 02:30:08 GMTCVECVE-2025-15004: DedeCMS freelist_main.php sql injectionhttps://agentprime.io/advisories/CVE-2025-15004/https://agentprime.io/advisories/CVE-2025-15004/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Dec 2025 00:02:08 GMTCVECVE-2025-6335: DedeCMS Template dedetag.class.php command injectionhttps://agentprime.io/advisories/CVE-2025-6335/https://agentprime.io/advisories/CVE-2025-6335/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Jun 2025 11:00:19 GMTCVECVE-2025-5137: DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injectionhttps://agentprime.io/advisories/CVE-2025-5137/https://agentprime.io/advisories/CVE-2025-5137/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 May 2025 00:00:10 GMTCVECVE-2024-12183: DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scriptinghttps://agentprime.io/advisories/CVE-2024-12183/https://agentprime.io/advisories/CVE-2024-12183/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 23:00:13 GMTCVECVE-2024-12182: DedeCMS soft_add.php cross site scriptinghttps://agentprime.io/advisories/CVE-2024-12182/https://agentprime.io/advisories/CVE-2024-12182/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 22:31:05 GMTCVECVE-2024-12181: DedeCMS SWF File uploads_add.php cross site scriptinghttps://agentprime.io/advisories/CVE-2024-12181/https://agentprime.io/advisories/CVE-2024-12181/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 22:00:14 GMTCVECVE-2024-12180: DedeCMS article_add.php cross site scriptinghttps://agentprime.io/advisories/CVE-2024-12180/https://agentprime.io/advisories/CVE-2024-12180/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Dec 2024 22:00:12 GMTCVECVE-2024-11138: DedeCMS friendlink_add.php unrestricted uploadhttps://agentprime.io/advisories/CVE-2024-11138/https://agentprime.io/advisories/CVE-2024-11138/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 18:00:15 GMTCVECVE-2024-9076: DedeCMS article_string_mix.php os command injectionhttps://agentprime.io/advisories/CVE-2024-9076/https://agentprime.io/advisories/CVE-2024-9076/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 22 Sep 2024 00:00:10 GMTCVECVE-2024-6940: DedeCMS article_template_rand.php code injectionhttps://agentprime.io/advisories/CVE-2024-6940/https://agentprime.io/advisories/CVE-2024-6940/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 21 Jul 2024 05:31:07 GMTCVECVE-2024-4790: DedeCMS path traversalhttps://agentprime.io/advisories/CVE-2024-4790/https://agentprime.io/advisories/CVE-2024-4790/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 May 2024 23:31:03 GMTCVECVE-2024-4594: DedeCMS sys_safe.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4594/https://agentprime.io/advisories/CVE-2024-4594/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 14:31:04 GMTCVECVE-2024-4593: DedeCMS sys_multiserv.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4593/https://agentprime.io/advisories/CVE-2024-4593/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 14:00:07 GMTCVECVE-2024-4592: DedeCMS sys_group_edit.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4592/https://agentprime.io/advisories/CVE-2024-4592/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 14:00:05 GMTCVECVE-2024-4591: DedeCMS sys_group_add.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4591/https://agentprime.io/advisories/CVE-2024-4591/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 13:31:06 GMTCVECVE-2024-4590: DedeCMS sys_info.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4590/https://agentprime.io/advisories/CVE-2024-4590/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 13:31:04 GMTCVECVE-2024-4589: DedeCMS mytag_edit.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4589/https://agentprime.io/advisories/CVE-2024-4589/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 13:00:09 GMTCVECVE-2024-4588: DedeCMS mytag_add.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4588/https://agentprime.io/advisories/CVE-2024-4588/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 13:00:07 GMTCVECVE-2024-4587: DedeCMS tpl.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4587/https://agentprime.io/advisories/CVE-2024-4587/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 12:31:06 GMTCVECVE-2024-4586: DedeCMS shops_delivery.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4586/https://agentprime.io/advisories/CVE-2024-4586/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 12:31:04 GMTCVECVE-2024-4585: DedeCMS member_type.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-4585/https://agentprime.io/advisories/CVE-2024-4585/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 May 2024 12:00:08 GMTCVECVE-2024-3686: DedeCMS update_guide.php path traversalhttps://agentprime.io/advisories/CVE-2024-3686/https://agentprime.io/advisories/CVE-2024-3686/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Apr 2024 13:31:04 GMTCVECVE-2024-3685: DedeCMS stepselect_main.php sql injectionhttps://agentprime.io/advisories/CVE-2024-3685/https://agentprime.io/advisories/CVE-2024-3685/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Apr 2024 13:00:08 GMTCVECVE-2024-3148: DedeCMS makehtml_archives_action.php sql injectionhttps://agentprime.io/advisories/CVE-2024-3148/https://agentprime.io/advisories/CVE-2024-3148/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 02:00:05 GMTCVECVE-2024-3147: DedeCMS makehtml_map.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-3147/https://agentprime.io/advisories/CVE-2024-3147/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 01:31:05 GMTCVECVE-2024-3146: DedeCMS makehtml_rss_action.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-3146/https://agentprime.io/advisories/CVE-2024-3146/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 01:31:03 GMTCVECVE-2024-3145: DedeCMS makehtml_js_action.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-3145/https://agentprime.io/advisories/CVE-2024-3145/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 01:00:05 GMTCVECVE-2024-3144: DedeCMS makehtml_spec.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-3144/https://agentprime.io/advisories/CVE-2024-3144/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 01:00:04 GMTCVECVE-2024-3143: DedeCMS member_rank.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-3143/https://agentprime.io/advisories/CVE-2024-3143/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Apr 2024 00:00:06 GMTCVECVE-2024-2823: DedeCMS mda_main.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-2823/https://agentprime.io/advisories/CVE-2024-2823/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 17:00:09 GMTCVECVE-2024-2822: DedeCMS vote_edit.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-2822/https://agentprime.io/advisories/CVE-2024-2822/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 17:00:08 GMTCVECVE-2024-2821: DedeCMS friendlink_edit.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-2821/https://agentprime.io/advisories/CVE-2024-2821/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 16:00:06 GMTCVECVE-2024-2820: DedeCMS baidunews.php cross-site request forgeryhttps://agentprime.io/advisories/CVE-2024-2820/https://agentprime.io/advisories/CVE-2024-2820/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Mar 2024 16:00:05 GMTCVECVE-2023-7212: DeDeCMS Backend file_class.php unrestricted uploadhttps://agentprime.io/advisories/CVE-2023-7212/https://agentprime.io/advisories/CVE-2023-7212/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 07 Jan 2024 16:31:03 GMTCVECVE-2023-5301: DedeCMS album_add.php AddMyAddon os command injectionhttps://agentprime.io/advisories/CVE-2023-5301/https://agentprime.io/advisories/CVE-2023-5301/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 30 Sep 2023 10:31:04 GMTCVE