5.3
Moyenne
CVE-2026-10581 A flaw has been found in DedeCMS 5.7.88
Description
A flaw has been found in DedeCMS 5.7.88. Affected by this vulnerability is the function base64_decode of the file /plus/download.php?open=1. This manipulation of the argument Link causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DedeCMS | 5.7.88 | Pas de correctif indiqué |
Références
- VDB-367676 | DedeCMS download.php base64_decode server-side request forgery vuldb.com
- VDB-367676 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-10581 | CVE Analysis and Report vuldb.com
- Submit #829404 | DedeCMS DedeCMS Content Management System v5.7.88 Server-Side Request Forgery (SSRF) / Open Redirect vuldb.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de DedeCMS
Les 54 CVE de DedeCMS →
CVE-2026-116253
A vulnerability was determined in DedeCMS 5.7.118
6.9
Moyenne
CVE-2026-116063
A weakness has been identified in DedeCMS up to 5.7.118
5.1
Moyenne
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118
6.9
Moyenne
CVE-2026-76800
A flaw has been found in DeDeCMS 3
5.3
Moyenne