CVEs we hold for Dedecms
Records whose assigning authority named Dedecms as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-76800DeDeCMS select_media_post.php unrestricted uploadn/a DeDeCMS CVE-2026-19353DedeCMS Installation Wizard index.php _4_Setup file inclusionn/a DedeCMS CVE-2026-15700DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversaln/a DedeCMS CVE-2026-15533DedeCMS Column Management search.php code injectionn/a DedeCMS CVE-2026-10608DedeCMS carbuyaction.php RemoveXSS sql injectionn/a DedeCMS CVE-2026-10607DedeCMS flink.php dede_htmlspecialchars sql injectionn/a DedeCMS CVE-2026-10606DedeCMS Feedback feedback.php TrimMsg sql injectionn/a DedeCMS CVE-2026-10581DedeCMS download.php base64_decode server-side request forgeryn/a DedeCMS CVE-2025-6335DedeCMS Template dedetag.class.php command injectionn/a DedeCMS CVE-2025-5137DedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injectionn/a DedeCMS CVE-2024-9076DedeCMS article_string_mix.php os command injectionn/a DedeCMS CVE-2024-6940DedeCMS article_template_rand.php code injectionn/a DedeCMS CVE-2024-4594DedeCMS sys_safe.php cross-site request forgeryn/a DedeCMS CVE-2024-4593DedeCMS sys_multiserv.php cross-site request forgeryn/a DedeCMS CVE-2024-4592DedeCMS sys_group_edit.php cross-site request forgeryn/a DedeCMS CVE-2024-4591DedeCMS sys_group_add.php cross-site request forgeryn/a DedeCMS CVE-2024-4590DedeCMS sys_info.php cross-site request forgeryn/a DedeCMS CVE-2024-4589DedeCMS mytag_edit.php cross-site request forgeryn/a DedeCMS CVE-2024-4588DedeCMS mytag_add.php cross-site request forgeryn/a DedeCMS CVE-2024-4587DedeCMS tpl.php cross-site request forgeryn/a DedeCMS CVE-2024-4586DedeCMS shops_delivery.php cross-site request forgeryn/a DedeCMS CVE-2024-4585DedeCMS member_type.php cross-site request forgeryn/a DedeCMS CVE-2024-3685DedeCMS stepselect_main.php sql injectionn/a DedeCMS CVE-2024-3148DedeCMS makehtml_archives_action.php sql injectionn/a DedeCMS CVE-2024-3147DedeCMS makehtml_map.php cross-site request forgeryn/a DedeCMS CVE-2024-3146DedeCMS makehtml_rss_action.php cross-site request forgeryn/a DedeCMS CVE-2024-3145DedeCMS makehtml_js_action.php cross-site request forgeryn/a DedeCMS CVE-2024-3144DedeCMS makehtml_spec.php cross-site request forgeryn/a DedeCMS CVE-2024-3143DedeCMS member_rank.php cross-site request forgeryn/a DedeCMS CVE-2024-2823DedeCMS mda_main.php cross-site request forgeryn/a DedeCMS CVE-2024-2822DedeCMS vote_edit.php cross-site request forgeryn/a DedeCMS CVE-2024-2821DedeCMS friendlink_edit.php cross-site request forgeryn/a DedeCMS CVE-2024-2820DedeCMS baidunews.php cross-site request forgeryn/a DedeCMS CVE-2024-12183DedeCMS HTTP POST Request carbuyaction.php RemoveXSS cross site scriptingn/a DedeCMS CVE-2024-12181DedeCMS SWF File uploads_add.php cross site scriptingn/a DedeCMS CVE-2024-11138DedeCMS friendlink_add.php unrestricted uploadn/a DedeCMS CVE-2023-7212DeDeCMS Backend file_class.php unrestricted uploadn/a DeDeCMS CVE-2023-5301DedeCMS album_add.php AddMyAddon os command injectionn/a DedeCMS CVE-2023-5022DedeCMS select_templets_post.php absolute path traversaln/a DedeCMS CVE-2023-3578DedeCMS co_do.php server-side request forgeryn/a DedeCMS CVE-2023-2928DedeCMS article_allowurl_edit.php code injectionn/a DedeCMS CVE-2023-2424DedeCMS config.php UpDateMemberModCache unrestricted uploadn/a DedeCMS CVE-2023-2059DedeCMS select_templets.php path traversaln/a DedeCMS CVE-2023-2056DedeCMS module_main.php GetSystemFile code injectionn/a DedeCMS 51 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.