CVE-2024-7905

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-7905 DedeBIZ archives_do.php AdminUpload unrestricted upload

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-7905 DedeBIZ archives_do.php AdminUpload unrestricted upload

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-7905

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2024-7905

The CVE-2024-7905 entry concerns DedeBIZ 6.3.0, specifically the AdminUpload function in admin/archives_do.php. The vulnerability arises from manipulating the litpic argument, causing unrestricted file upload. This is described as exploitable remotely, with public disclosure of the exploit. Multi...

CVE-2024-7905: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archivesdo.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

PT-2024-38675 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: A critical vulnerability has been found in DedeBIZ, affecting the AdminUpload function of the file admin/archives do.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible ...

CVE-2020-21861

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

PT-2023-11604

Name of the Vulnerable Software and Affected Versions DuxCMS version 2.1 Description A file upload issue allows attackers to execute arbitrary PHP code. The vulnerability is exploited via the duxcms/AdminUpload/upload endpoint, allowing attackers to upload malicious files. Recommendations For...

CVE-2020-21861: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload...

DuxCMS 代码问题漏洞

DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which stems from a file upload vulnerability that allows an attacker to execute arbitrary php code via duxcms/AdminUpload/upload...