Skip to content
OpenAdvisories

Vendor

DedeCMS

3 known vulnerabilities.

Products

DedeCMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2014-125131

    DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php

    DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHand parameter. Attackers can send crafted GET requests to /include/dialog/config.…

    DedeCMS DedeCMS