CVE-2024-52770

The DedeBIZ content management system (version v6.3.0 ) is susceptible to an arbitrary file upload vulnerability within the /admin/file_manage_control component. This flaw allows an attacker to upload a crafted file, leading to arbitrary code execution on the target system. No official patch is c...

CVE-2024-52771: Improper Limitation of a Pathname to a Restricted Directory

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

CVE-2024-52771

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

CVE-2024-52769

DedeBIZ version v6.3.0 is affected by an arbitrary file upload vulnerability in the /admin/friendlink_edit component (API endpoint). This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. As a temporary workaround, it is recommended to disable the /admin/fri...

CVE-2024-52771

DedeBIZ v6.3.0 is susceptible to an arbitrary file deletion vulnerability affecting the /admin/file_manage_view component. This flaw is characterized as an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal). The vulnerability allows for the deletion of files on the syste...

CVE-2024-52770

An arbitrary file upload vulnerability in the component /admin/filemanagecontrol of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

DedeBIZ 安全漏洞

DedeBIZ is a content management system from China Muyun Intelligence DedeBIZ company. A security vulnerability exists in DedeBIZ version v6.3.0, which stems from the presence of an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by uploading a carefully craft...

CVE-2024-52769: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/friendlinkedit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file...

PT-2024-35431 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: An arbitrary file upload vulnerability in the component "/admin/file manage control" allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For DedeBIZ version 6.3.0,...

CVE-2024-44716

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44717

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44717

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

DedeBIZ 安全漏洞

DedeBIZ is a content management system from Muyun Intelligence DedeBIZ, a Chinese company. A security vulnerability exists in DedeBIZ version v6.3.0, which stems from vulnerability to cross-site scripting attacks that allow an attacker to execute arbitrary web script or HTML via a crafted payload...

CVE-2024-44717

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44716

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

DedeBIZ 安全漏洞

DedeBIZ is a content management system from Muyun Intelligence DedeBIZ, a Chinese company. A security vulnerability exists in DedeBIZ version v6.3.0, which stems from vulnerability to cross-site scripting attacks that allow an attacker to execute arbitrary web script or HTML via a crafted payload...

CVE-2024-44716

CVE-2024-44716 concerns DedeBIZ v6.3.0 with a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. The CVE entry in NVD lists a CVSSv3.1 base score of 6.1 (Medium) with AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:N, indicati...

CVE-2024-44717

CVE-2024-44717 is an XSS vulnerability affecting DedeBIZ v6.3.0 , where a crafted payload can cause arbitrary web scripts or HTML execution. Connected documents corroborate the issue across Red Hat, NVD, CNNVD, CVE listing, and enrichment sources, all referencing the same product/version. The ava...

PT-2024-31218

Name of the Vulnerable Software and Affected Versions DedeBIZ version 6.3.0 Description A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For DedeBIZ version 6.3.0, update to a version that includes a fix for...

CVE-2024-44716: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...