Cross-Site Request Forgery

Every one of the 48 is a mark on the map. Named now: 1 to 26, most at risk first.

1. DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code ExecutionCVE-2018-7700Dedecms · 74% likely

   CWE-352

2. DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution.CVE-2021-32073Dedecms · 1.2% likely

   CWE-352

3. The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an…CVE-2020-18917Dedecms · 0.8% likely

   CWE-352

4. file_manage_control.php in DedeCMS 5.7 has CSRF in an fmdo=rename action, as demonstrated by renaming an arbitrary file under uploads/userup to a .php file under the web root to a…CVE-2018-9134Dedecms · 0.7% likely

   CWE-352

5. DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords.CVE-2022-43031Dedecms · CVSS 8.8 · 0.7% likely

   CWE-352

6. DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /src/dede/makehtml_homepage.php allowing a remote attacker to execute arbitrary code.CVE-2024-29684Dedecms · CVSS 9.8 · 0.6% likely

   CWE-352

7. DedeCMS sys_multiserv.php cross-site request forgeryCVE-2024-4593Dedecms · CVSS 4.3 · 0.4% likely

   CWE-352

8. DedeCMS sys_group_edit.php cross-site request forgeryCVE-2024-4592Dedecms · CVSS 4.3 · 0.4% likely

   CWE-352

9. DedeCMS sys_group_add.php cross-site request forgeryCVE-2024-4591Dedecms · CVSS 4.3 · 0.4% likely

   CWE-352

10. DedeCMS member_type.php cross-site request forgeryCVE-2024-4585Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

11. DedeCMS sys_info.php cross-site request forgeryCVE-2024-4590Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

12. DedeCMS mytag_edit.php cross-site request forgeryCVE-2024-4589Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

13. DedeCMS mytag_add.php cross-site request forgeryCVE-2024-4588Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

14. DedeCMS tpl.php cross-site request forgeryCVE-2024-4587Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

15. DedeCMS shops_delivery.php cross-site request forgeryCVE-2024-4586Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

16. DedeCMS sys_safe.php cross-site request forgeryCVE-2024-4594Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

17. DedeCMS makehtml_js_action.php cross-site request forgeryCVE-2024-3145Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

18. DedeCMS makehtml_spec.php cross-site request forgeryCVE-2024-3144Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

19. DedeCMS makehtml_rss_action.php cross-site request forgeryCVE-2024-3146Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

20. DedeCMS makehtml_map.php cross-site request forgeryCVE-2024-3147Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

21. DedeCMS friendlink_edit.php cross-site request forgeryCVE-2024-2821Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

22. DedeCMS baidunews.php cross-site request forgeryCVE-2024-2820Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

23. DedeCMS member_rank.php cross-site request forgeryCVE-2024-3143Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

24. DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.CVE-2024-28673Dedecms · CVSS 8.8 · 0.4% likely

    CWE-352

25. DedeCMS vote_edit.php cross-site request forgeryCVE-2024-2822Dedecms · CVSS 4.3 · 0.4% likely

    CWE-352

26. DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php.CVE-2024-30965Dedecms · CVSS 8.8 · 0.4% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.