CVE-2026-116253High· 7.3▾ TwilightA vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/ad_js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::_RunMagicQuotes of the file plus/ad_js.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotely.
DedeCMS 5.7.118Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116063Medium· 4.7DedeCMS update_guide.php require_once code injection
CVE-2026-94004High· 7.3A vulnerability was found in DedeCMS up to 5.7.118
CVE-2021-48016Critical· 9.8DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php
CVE-2014-125131Medium· 6.1DedeCMS 5.6 / 5.7 Reflected XSS via adminDirHand in config.php
CVE-2025-10097Medium· 6.3A vulnerability was identified in SimStudioAI sim up to 1.0.0
CVE-2023-29383Low· 3.3In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger)