Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

DedeCMS — Vulnerabilities & Security Advisories 52

All 52 CVE vulnerabilities found in DedeCMS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting DedeCMS, a popular content management system originally developed in China, focusing on common weakness classes such as SQL injection, cross-site scripting, and remote code execution issues. It collects historical security advisories and bug reports spanning from the software's initial release through recent patch updates, covering both critical and moderate-severity flaws identified in various versions of the platform. Readers can use this resource to track the vendor's advisory timeline, understand the specific technical nature of the identified weakness categories, and review the complete vulnerability history for DedeCMS instances in their infrastructure.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2024-4585 DedeCMS member_type.php cross-site request forgery CWE-352 4.3 Medium 2024-05-07
CVE-2024-3686 DedeCMS update_guide.php path traversal CWE-24 4.3 Medium 2024-04-12
CVE-2024-3685 DedeCMS stepselect_main.php sql injection CWE-89 6.3 Medium 2024-04-12
CVE-2024-3148 DedeCMS makehtml_archives_action.php sql injection CWE-89 6.3 Medium 2024-04-02
CVE-2024-3147 DedeCMS makehtml_map.php cross-site request forgery CWE-352 4.3 Medium 2024-04-02
CVE-2024-3146 DedeCMS makehtml_rss_action.php cross-site request forgery CWE-352 4.3 Medium 2024-04-02
CVE-2024-3145 DedeCMS makehtml_js_action.php cross-site request forgery CWE-352 4.3 Medium 2024-04-02
CVE-2024-3144 DedeCMS makehtml_spec.php cross-site request forgery CWE-352 4.3 Medium 2024-04-02
CVE-2024-3143 DedeCMS member_rank.php cross-site request forgery CWE-352 4.3 Medium 2024-04-02
CVE-2024-2823 DedeCMS mda_main.php cross-site request forgery CWE-352 4.3 Medium 2024-03-22
CVE-2024-2822 DedeCMS vote_edit.php cross-site request forgery CWE-352 4.3 Medium 2024-03-22
CVE-2024-2821 DedeCMS friendlink_edit.php cross-site request forgery CWE-352 4.3 Medium 2024-03-22
CVE-2024-2820 DedeCMS baidunews.php cross-site request forgery CWE-352 4.3 Medium 2024-03-22
CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload CWE-434 4.7 Medium 2024-01-07
CVE-2023-5301 DedeCMS album_add.php AddMyAddon os command injection CWE-78 4.7 Medium 2023-09-30
CVE-2023-5022 DedeCMS select_templets_post.php absolute path traversal CWE-36 5.5 Medium 2023-09-17
CVE-2023-4747 DedeCMS tags.php sql injection CWE-89 6.3 Medium 2023-09-04
CVE-2023-3578 DedeCMS co_do.php server-side request forgery CWE-918 5.5 Medium 2023-07-10
CVE-2023-2928 DedeCMS article_allowurl_edit.php code injection CWE-94 6.3 Medium 2023-05-27
CVE-2023-2424 DedeCMS config.php UpDateMemberModCache unrestricted upload CWE-434 6.3 Medium 2023-04-29
CVE-2023-2059 DedeCMS select_templets.php path traversal CWE-28 4.3 Medium 2023-04-14
CVE-2023-2056 DedeCMS module_main.php GetSystemFile code injection CWE-94 6.3 Medium 2023-04-14

All 52 known CVE vulnerabilities affecting DedeCMS with full Chinese analysis, references, and POCs where available.