File and Path Handling

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. DedeCMS 5.7.87 - Directory TraversalCVE-2023-2059Dedecms · CVSS 4.3 · 2.4% likely

   CWE-28

2. A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell.CVE-2015-4553Dedecms · 57% likely

   CWE-434

3. In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and then execute this file, via this sequenc…CVE-2019-8933Dedecms · 3.4% likely

   CWE-434

4. DedeCMS friendlink_add.php unrestricted uploadCVE-2024-11138Dedecms · CVSS 2.7 · 2.6% likely

   CWE-434

5. An arbitrary file upload vulnerability in the /uploads/dede component of DedeCMS V5.7SP2 allows attackers to upload a webshell in HTM format.CVE-2020-18114Dedecms · 1.9% likely

   CWE-434

6. DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).CVE-2023-36298Dedecms · 1.5% likely

   CWE-434

7. DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which is used in the templet parameter to member/article_edit.php.CVE-2017-17727Dedecms · 1.5% likely

   CWE-434

8. DedeCMS through V5.7SP2 allows arbitrary file upload in dede/album_edit.php or dede/album_add.php, as demonstrated by a dede/album_edit.php?dopost=save&formzip=1 request with a ZI…CVE-2019-8362Dedecms · 1.5% likely

   CWE-434

9. DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parameter, as demonstrated…CVE-2018-12045Dedecms · 1.4% likely

   CWE-434

10. DedeCMS 5.7.98 has a file upload vulnerability in the background.CVE-2022-40886Dedecms · 1.2% likely

    CWE-434

11. An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal.CVE-2023-30380Dedecms · CVSS 7.5 · 1.2% likely

    CWE-22

12. An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via uploading a crafted PHP file.CVE-2023-37839Dedecms · 1.2% likely

    CWE-434

13. A file uploading vulnerability exists in /include/helpers/upload.helper.php in DedeCMS V5.7 SP2, which can be utilized by attackers to upload and execute arbitrary PHP code via th…CVE-2018-10375Dedecms · 1.2% likely

    CWE-434

14. DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter.CVE-2022-30508Dedecms · 1.1% likely

    CWE-22

15. DedeCMS path traversalCVE-2024-4790Dedecms · CVSS 4.3 · 1.1% likely

    CWE-24

16. DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php.CVE-2022-40921Dedecms · 1.1% likely

    CWE-434

17. An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted PHP file.CVE-2023-43226Dedecms · CVSS 8.8 · 0.9% likely

    CWE-434

18. DedeCMS update_guide.php path traversalCVE-2024-3686Dedecms · CVSS 4.3 · 0.9% likely

    CWE-24

19. DedeCMS config.php UpDateMemberModCache unrestricted uploadCVE-2023-2424Dedecms · CVSS 6.3 · 0.9% likely

    CWE-434

20. An arbitrary file read vulnerability in DedeCMS v5.7.114 allows authenticated attackers to read arbitrary files by specifying any path in makehtml_js_action.php.CVE-2024-34245Dedecms · CVSS 6.5 · 0.8% likely

    CWE-22

21. DedeCMS select_templets_post.php absolute path traversalCVE-2023-5022Dedecms · CVSS 5.5 · 0.8% likely

    CWE-36

22. DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.CVE-2024-22895Dedecms · CVSS 8.8 · 0.8% likely

    CWE-434

23. An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.114 allows attackers to execute arbitrary code via uploading a crafted file.CVE-2024-35510Dedecms · CVSS 9.8 · 0.7% likely

    CWE-434

24. DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.CVE-2023-40784Dedecms · CVSS 9.8 · 0.7% likely

    CWE-434

25. A File Upload vulnerability in DedeCMS v5.7 allows a local attacker to execute arbitrary code via a crafted payload.CVE-2024-29661Dedecms · CVSS 9.8 · 0.7% likely

    CWE-434

26. DeDeCMS Backend file_class.php unrestricted uploadCVE-2023-7212Dedecms · CVSS 4.7 · 0.6% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.