Vulnerabilities > Dedecms > Dedecms > 5.7.109

DATE CVE VULNERABILITY TITLE RISK
2024-01-07 CVE-2023-7212 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms
A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112.
network
low complexity
dedecms CWE-434
critical
9.8
2023-09-28 CVE-2023-43226 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms
An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.
network
low complexity
dedecms CWE-434
8.8
2023-08-03 CVE-2023-36298 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms 5.7.109
DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).
network
low complexity
dedecms CWE-434
8.8
2023-07-13 CVE-2023-37839 Unrestricted Upload of File with Dangerous Type vulnerability in Dedecms 5.7.109
An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.
network
low complexity
dedecms CWE-434
critical
9.8
2023-07-10 CVE-2023-3578 Server-Side Request Forgery (SSRF) vulnerability in Dedecms 5.7.109
A vulnerability classified as critical was found in DedeCMS 5.7.109.
network
low complexity
dedecms CWE-918
critical
9.8