SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component
History

Tue, 28 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
First Time appeared Dedecms
Dedecms dedecms
Vendors & Products Dedecms
Dedecms dedecms

Mon, 27 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
Description SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the sys_sql_query.php component
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-27T21:41:24.713Z

Reserved: 2026-06-07T00:00:00.000Z

Link: CVE-2026-51077

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-28T01:00:04Z