Filtered by vendor Dedecms Subscriptions
Total 123 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-2270 1 Dedecms 1 Dedecms 2024-11-21 N/A
Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.
CVE-2024-46373 1 Dedecms 1 Dedecms 2024-09-20 8.8 High
Dedecms V5.7.115 contains an arbitrary code execution via file upload vulnerability in the backend.
CVE-2024-42636 1 Dedecms 1 Dedecms 2024-08-23 7.2 High
DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath.