CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

DEDECMSV6 backend di***_li***.php file has SQL injection vulnerability

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A SQL injection vulnerability exists in the DEDECMSV6 backend dili.php file. An attacker can exploit this vulnerability to obtain sensitive information from the database...