5.3
Moyenne
CVE-2025-15004 A vulnerability was identified in DedeCMS up to 5.7.118
Description
A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DedeCMS | 5.7.118 | Pas de correctif indiqué |
Références
- VDB-337710 | DedeCMS freelist_main.php sql injection vuldb.com
- VDB-337710 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #717316 | dedecms V5.7.118 SQL Injection vuldb.com
- note-hxlab.wetolink.com note-hxlab.wetolink.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de DedeCMS
Les 54 CVE de DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Moyenne
CVE-2026-116063
A weakness has been identified in DedeCMS up to 5.7.118
5.1
Moyenne
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Moyenne
CVE-2026-76800
A flaw has been found in DeDeCMS 3
5.3
Moyenne