Issues

• Stored XSS in Link Widget text field

  diem-project/diem#459 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Password-reset and remember-me tokens are generated with rand()

  diem-project/diem#458 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Open redirect after front-end and administrative sign-in

  diem-project/diem#457 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Reflected XSS in administrative console command rendering

  diem-project/diem#456 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Cleartext version check permits DOM XSS in the administrative application

  diem-project/diem#455 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Bundled Google Analytics client disables TLS certificate validation

  diem-project/diem#454 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Initial setup creates an admin / admin super-administrator account when the database password is empty

  diem-project/diem#453 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• User passwords are stored using single-round SHA-1

  diem-project/diem#452 · Filter by author ThanatosXingYu opened on Sep 30, 2026

• Path traversal in code editors permits reads and writes outside the Diem project

  diem-project/diem#451 · Filter by author ThanatosXingYu opened on Sep 1, 2026

• Public dmWidget endpoints bypass page access controls by widget ID

  diem-project/diem#450 · Filter by author ThanatosXingYu opened on Jul 19, 2026

• CSRF in the administrative console enables cross-site command execution

  diem-project/diem#449 · Filter by author ThanatosXingYu opened on Jul 19, 2026

• Front-end widget editor permits unrestricted PHP upload to /uploads/widget/

  diem-project/diem#448 · Filter by author ThanatosXingYu opened on Jul 17, 2026

• OS command injection in dmAdminPlugin/modules/dmConsole/actions/actions.class.php

  diem-project/diem#447 · Filter by author ThanatosXingYu opened on Jul 17, 2026

• Upgrade to Symfony 6

  diem-project/diem#446 · Filter by author multifinger opened on Mar 18, 2023

• Issue with link routing

  diem-project/diem#445 · Filter by author ghost opened on Jul 15, 2020

• i can't access http://diem-project.org - site is offline?

  diem-project/diem#444 · Filter by author namthang opened on Dec 12, 2017
  1

• So long time, but with me diem-project is always best

  diem-project/diem#443 · Filter by author namthang opened on Oct 20, 2017

• Array to string conversion (notice on php 5.4)

  diem-project/diem#438 · Filter by author jrencz opened on Jan 28, 2013
  3

• sfCulture notification on php 5.4

  diem-project/diem#437 · Filter by author jrencz opened on Jan 27, 2013

• form generator problem critical issue !

  diem-project/diem#436 · Filter by author roozbeh360 opened on Jan 12, 2013
  4

• small style change regarding editing widgets on front

  diem-project/diem#417 · Filter by author ardi-n opened on Oct 21, 2011
  11

• New bug tracker live

  defectmajor
  diem-project/diem#369 · Filter by author 4levels opened on Mar 2, 2011
  1