Lucene search
China National Vulnerability DatabaseCNVD-2023-80116HistoryOct 07, 2023 - 12:00 a.m.
DedeBIZ Code Execution Vulnerability
2023-10-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
dedebiz
content management system
china muyun intelligent technology
code execution
vulnerability
admin
file management control
arbitrary code execution
snippet filtering
DedeBIZ is a content management system from China Muyun Intelligent Technology (DedeBIZ) company. A code execution vulnerability exists in DedeBIZ version v6.2.11, which stems from the $activepath and $filename parameters in /admin/file_manage_control.php failing to correctly filter the special elements of constructed snippets. An attacker could exploit this vulnerability to cause arbitrary code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dedebiz dedebiz v | eq | 6.2.11 |
Related
cve
cve
CVE-2023-43234
2023-09-27 15:19:33
prion
prion
Remote code execution
2023-09-27 15:19:00
nvd
nvd
CVE-2023-43234
2023-09-27 15:19:33
cvelist
cvelist
CVE-2023-43234
2023-09-26 00:00:00