CVE-2023-31546

Consolidated details show: Affected product is DedeBIZ v6.0.3. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the search feature , allowing an attacker to run arbitrary code in the context of a user session. Root cause identified as improper handling of input in the search...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-6755

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

Sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755 DedeBIZ content_batchup_action.php sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755

CVE-2023-6755 affects DedeBIZ 6.2. The vulnerability is in /src/admin/content_batchup_action.php where manipulation of the endid argument enables SQL injection. The issue can be exploited remotely; public disclosures exist. Remediation guidance across sources is limited to temporary mitigations: ...

PT-2023-23382 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.0.3 Description: The issue allows attackers to run arbitrary code via the search feature. This is a Cross Site Scripting XSS issue, which means attackers can execute scripts in the context of another user's session,...

DedeBIZ Security Vulnerabilities

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A security vulnerability exists in DedeBIZ version v6.0.3, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to run arbitrary code via the search functio...

PT-2023-32758 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2 Description: A critical issue affects the processing of the file /src/admin/content batchup action.php. The manipulation of the endid argument leads to SQL injection. The attack may be initiated remotely. Recommendations:...

DedeBIZ Code Execution Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A code execution vulnerability exists in DedeBIZ version v6.2.11, which stems from the $activepath and $filename parameters in /admin/filemanagecontrol.php failing to correctly filter the special...

CVE-2023-5268

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-5268

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

Sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-5268 DedeBIZ makehtml_taglist_action.php sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-5268 DedeBIZ makehtml_taglist_action.php sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-5268

CVE-2023-5268 concerns a SQL injection vulnerability in DedeBIZ 6.2 . The issue affects processing of the file at /src/admin/makehtml_taglist_action.php, where manipulation of the parameter mktime enables SQL injection. The attack is described as potentially remote, and multiple sources have disc...

CVE-2023-5266

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tagsmain.php. The manipulation of the argument ids leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

CVE-2023-5266

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tagsmain.php. The manipulation of the argument ids leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

Sql injection

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tagsmain.php. The manipulation of the argument ids leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...