5.3
Medium
CVE-2025-15004 A vulnerability was identified in DedeCMS up to 5.7.118
Description
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DedeCMS | 5.7.118 | No fix stated |
References
- VDB-337710 | DedeCMS freelist_main.php sql injection vuldb.com
- VDB-337710 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #717316 | dedecms V5.7.118 SQL Injection vuldb.com
- note-hxlab.wetolink.com note-hxlab.wetolink.com
Timeline
- Published
- Last modified