4 matches found
CVE-2023-43234
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...
9.8CVSS8.4AI score0.00997EPSS
SaveExploits0References1
CVE-2023-43234
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution RCE vulnerabilities at /admin/filemanagecontrol.php via the $activepath and $filename parameters...
9.8CVSS6.4AI score0.00997EPSS
SaveExploits0References4
CVE-2023-43234
CVE-2023-43234 affects DedeBIZ v6.2.11. The vulnerability exists in the /admin/file_manage_control.php endpoint, exploitable via the $activepath and $filename parameters, enabling remote code execution. Multiple sources describe the root cause as improper handling/filtering of constructed snippet...
9.8CVSS10AI score0.00997EPSS
SaveExploits0References3Affected Software1
20