A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
History

Tue, 10 Dec 2024 17:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:dedecms:dedecms:*:*:*:*:*:*:*:*

Thu, 05 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Dedecms
Dedecms dedecms
CPEs cpe:2.3:a:dedecms:dedecms:5.7.116:*:*:*:*:*:*:*
Vendors & Products Dedecms
Dedecms dedecms
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 04 Dec 2024 22:15:00 +0000

Type Values Removed Values Added
Description A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Title DedeCMS article_add.php cross site scripting
Weaknesses CWE-79
CWE-94
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:P/A:N'}

cvssV3_0

{'score': 3.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N'}

cvssV3_1

{'score': 3.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2024-12-04T22:00:12.689Z

Updated: 2024-12-05T14:46:10.618Z

Reserved: 2024-12-04T16:30:46.328Z

Link: CVE-2024-12180

cve-icon Vulnrichment

Updated: 2024-12-05T14:45:59.472Z

cve-icon NVD

Status : Analyzed

Published: 2024-12-04T22:15:22.140

Modified: 2024-12-10T16:34:52.763

Link: CVE-2024-12180

cve-icon Redhat

No data.