DedeBIZ Cross-Site Scripting Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which stems from the Article Handler component can lead to cross-site scripting vulnerability. No detailed vulnerability details a...

CVE-2023-4170

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

Cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

CVE-2023-4170

DedeBIZ 6.2.10 is affected, with the Article Handler component enabling cross-site scripting. The issue is exploitable remotely and is publicly disclosed (CVE-2023-4170, VDB-236186). Red Hat/EUVD/CNVD/CVE records corroborate XSS in this version. Root cause detail is not disclosed in the documents...

CVE-2023-4170 DedeBIZ Article cross site scripting

A vulnerability was found in DedeBIZ 6.2.10. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Article Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public a...

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which stems from the Article Handler component can lead to cross-site scripting vulnerability. No detailed vulnerability details a...

PT-2023-28055 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A vulnerability was found in the Article Handler component, which can be exploited to lead to cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure...

CVE-2023-3839

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...

CVE-2023-3838

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

Sql injection

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...

Cross site scripting

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

CVE-2023-3839

CVE-2023-3839 concerns DedeBIZ 6.2.10 with an SQL injection in the file /admin/sys_sql_query.php via the sqlquery parameter. The vulnerability allows remote exploitation and is described as high-severity in most references, with a relatively high attack complexity noted by some assessments. The e...

CVE-2023-3839 DedeBIZ sys_sql_query.php sql injection

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...

CVE-2023-3839 DedeBIZ sys_sql_query.php sql injection

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...

CVE-2023-3838

CVE-2023-3838 affects DedeBIZ 6.2.10. The vulnerability is an XSS in an unknown function within the file /admin/vote_edit.php, allowing remote exploitation. Exploit details are publicly disclosed. Remediation if not patched: as a temporary control, disable or restrict access to /admin/vote_edit.p...

CVE-2023-3838 DedeBIZ vote_edit.php cross site scripting

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

CVE-2023-3838 DedeBIZ vote_edit.php cross site scripting

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

PT-2023-26398 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue has been found in DedeBIZ, affecting some unknown functionality of the file /admin/sys sql query.php. The manipulation of the sqlquery argument leads to sql injection. The attack can be...

PT-2023-26391 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue was found in DedeBIZ, affecting an unknown functionality of the file /admin/vote edit.php. This issue leads to cross site scripting and can be launched remotely. The exploit has been...

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which originates from an unknown function in the file /admin/voteedit.php, resulting in cross-site scripting...