Vulnerabilities > Dedecms > Dedecms > 5.7.97

DATE CVE VULNERABILITY TITLE RISK
2023-03-16 CVE-2023-27709 SQL Injection vulnerability in Dedecms
SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.
network
low complexity
dedecms CWE-89
7.2
7.2
2023-02-02 CVE-2022-48140 Cross-site Scripting vulnerability in Dedecms 5.7.97
DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename.
network
low complexity
dedecms CWE-79
5.4
5.4