Vendor
high
advisory
DedeCMS: Code injection via Advertisement Rendering (CVE-2026-116253)
1 CVEA code injection vulnerability in DedeCMS 5.7.118 allows for remote exploitation via the aid parameter in the Advertisement Rendering component.
DedeCMS
1c
critical
threat
DedeCMS: PHP code injection in ShowMsg() (CVE-2021-48016)
1 rule 1 TTP 1 CVEDedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in the ShowMsg() function, allowing unauthenticated attackers to execute arbitrary system commands via a crafted HTTP Referer header.
PoC
DedeCMS
php-injection
remote-code-execution
web-application-vulnerability
1r
1t
1c
high
advisory
Remote Code Injection Vulnerability in DedeCMS
1 rule 2 TTPs 1 CVEDedeCMS versions up to 5.7.118 contain a code injection vulnerability in the plus/mytag_js.php file that allows unauthenticated remote attackers to execute arbitrary code via the aid argument.
DedeCMS
1r
2t
1c