Skip to content
OpenAdvisories

Vendor

DedeCMS

3 known vulnerabilities.

Products

DedeCMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-48016

    DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php

    DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an e…

    DedeCMS DedeCMS