Out-of-bounds

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-7181

CVE-2023-7181 affects Muyun DedeBIZ (versions up to 6.2.12) via the Add Attachment Handler component. The issue enables unrestricted file upload and can be triggered remotely; public exploits have been disclosed. Several sources corroborate this vulnerability in DedeBIZ, and the primary mitigatio...

CVE-2023-7181 Muyun DedeBIZ Add Attachment unrestricted upload

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

CVE-2023-7181: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

PT-2023-32927 · Unknown · Muyun Dedebiz

Name of the Vulnerable Software and Affected Versions: Muyun DedeBIZ versions up to 6.2.12 Description: A critical issue was found in the component Add Attachment Handler, allowing for unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public. The vend...

DedeBIZ Code Issue Vulnerability

DedeBIZ is a content management system from the Chinese company Muyun Intelligent Technology DedeBIZ. A code issue vulnerability exists in Muyun DedeBIZ versions prior to 6.2.12, which stems from the component Add Attachment Handler that causes unrestricted uploads...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

Cross site scripting

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-31546: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-31546

Consolidated details show: Affected product is DedeBIZ v6.0.3. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the search feature , allowing an attacker to run arbitrary code in the context of a user session. Root cause identified as improper handling of input in the search...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-31546

Cross Site Scripting XSS vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature...

CVE-2023-6755

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

Sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755

CVE-2023-6755 affects DedeBIZ 6.2. The vulnerability is in /src/admin/content_batchup_action.php where manipulation of the endid argument enables SQL injection. The issue can be exploited remotely; public disclosures exist. Remediation guidance across sources is limited to temporary mitigations: ...

CVE-2023-6755 DedeBIZ content_batchup_action.php sql injection

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2023-6755

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/contentbatchupaction.php. The manipulation of the argument endid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...