CVE-2024-4588

A vulnerability was found in DedeCMS 5.7. It has been classified as problematic. Affected is an unknown function of the file /src/dede/mytag_add.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263310 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-352

• https://github.com/Hckwzh/cms/blob/main/19.mdExploit
• https://vuldb.com/?ctiid.263310Permissions Required, VDB Entry
• https://vuldb.com/?id.263310Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.324956Third Party Advisory, VDB Entry
• https://github.com/Hckwzh/cms/blob/main/19.mdExploit
• https://vuldb.com/?ctiid.263310Permissions Required, VDB Entry
• https://vuldb.com/?id.263310Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.324956Third Party Advisory, VDB Entry

Published

May 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45874A DLL hijacking vulnerability in VegaBird Vooki 5.2.9 allows…9.8
• CVE-2024-45875The create user function in baltic-it TOPqw Webportal 1.35.2…5.4
• CVE-2024-45876The login form of baltic-it TOPqw Webportal v1.35.283.2 (fix…6.5
• CVE-2024-45877baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incor…6.5
• CVE-2024-45878The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283…5.4
• CVE-2024-45879The file upload function in the "QWKalkulation" tool of balt…5.4
• CVE-2024-45880A command injection vulnerability exists in Motorola CX2L ro…8
• CVE-2024-45882DrayTek Vigor3900 1.5.1.3 contains a command injection vulne…8
• CVE-2024-45884DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45885DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45887DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45888DrayTek Vigor3900 1.5.1.3 contains a command injection vulne…8