Browse CVEs

CRITICAL 9.8 CVE-2024-52770 An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via u… Dedebiz No fix yet Fix from $2,3002024-11-20 CRITICAL 9.1 CVE-2024-52771 DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view. Dedebiz No fix yet Fix from $2,3002024-11-20 HIGH 7.2 CVE-2024-52769 An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploa… Dedebiz No fix yet Fix from $1,9502024-11-20 MEDIUM 6.1 CVE-2024-44716 A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Dedebiz Mitigation only Fix from $1,6002024-08-29 MEDIUM 6.1 CVE-2024-44717 A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Dedebiz No fix yet Fix from $1,6002024-08-29 HIGH 8.8 CVE-2024-7906 A vulnerability classified as critical was found in DedeBIZ 6.3.0. This vulnerability affects the function get_mime_type of the file /admin/dialog/se… Dedebiz Mitigation only Fix from $1,9502024-08-18 HIGH 7.2 CVE-2024-7905 A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archives_do.php. The … Dedebiz No fix yet Fix from $1,9502024-08-18 HIGH 8.8 CVE-2024-7904 A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/fil… Dedebiz No fix yet Fix from $1,9502024-08-18 HIGH 8.8 CVE-2024-7903 A vulnerability was found in DedeBIZ 6.3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file … Dedebiz No fix yet Fix from $1,9502024-08-18 HIGH 7.2 CVE-2024-0558 A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtml_freel… Dedebiz No fix yet Fix from $1,9502024-01-15 MEDIUM 5.4 CVE-2024-0557 A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Set… Dedebiz No fix yet Fix from $1,6002024-01-15 CRITICAL 9.6 CVE-2023-31546EPSS 49% Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature. Dedebiz No fix yet Fix from $2,3002023-12-14 HIGH 7.2 CVE-2023-6755 A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/content_batchu… Dedebiz No fix yet Fix from $1,9502023-12-13 HIGH 7.2 CVE-2023-5268 A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtml_tagli… Dedebiz No fix yet Fix from $1,9502023-09-29 HIGH 8.8 CVE-2023-5266 A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tags_main.php. The m… Dedebiz No fix yet Fix from $1,9502023-09-29 CRITICAL 9.8 CVE-2023-43234 DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath … Dedebiz Mitigation only Fix from $2,3002023-09-27 MEDIUM 5.4 CVE-2023-43232 A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary … Dedebiz Mitigation only Fix from $1,6002023-09-27 HIGH 7.2 CVE-2023-3839 A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the f… Dedebiz No fix yet Fix from $1,9502023-07-23 CRITICAL 9.8 CVE-2022-44118 dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php. Dedecmsv6 Mitigation only Fix from $2,3002022-11-23 CRITICAL 9.8 CVE-2022-44120 dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php. Dedecmsv6 Mitigation only Fix from $2,3002022-11-23 CRITICAL 9.1 CVE-2022-43196 dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php. Dedecmsv6 Mitigation only Fix from $2,3002022-11-23 HIGH 7.2 CVE-2022-36215 DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php. Dedecmsv6 No fix yet Fix from $1,9502022-08-17