Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:29 a.m.5 views

CVE-2024-44717

A cross-site scripting XSS vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS5.8AI score0.00388EPSS
Exploits0
OSV
OSV
added 2024/11/20 5:15 p.m.0 views

CVE-2024-52771

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/filemanageview...

9.1CVSS5.8AI score0.00403EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.1 views

PT-2024-35432

Name of the Vulnerable Software and Affected Versions DedeBIZ version 6.3.0 Description The issue is related to an arbitrary file deletion vulnerability. It can be exploited via the /admin/file manage view component. Recommendations For DedeBIZ version 6.3.0, consider restricting access to the...

9.1CVSS5.5AI score0.00403EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.1 views

PT-2024-35431 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: An arbitrary file upload vulnerability in the component "/admin/file manage control" allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For DedeBIZ version 6.3.0,...

9.8CVSS7.1AI score0.00304EPSS
Exploits1References7
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.2 views

DedeBIZ Security Vulnerabilities

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A security vulnerability exists in DedeBIZ version v6.0.3, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to run arbitrary code via the search functio...

9.6CVSS6.2AI score0.21195EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/17 8:15 p.m.2 views

CVE-2022-36215

DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sysinfo.php...

7.2CVSS7.7AI score0.15442EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/08/17 12:0 a.m.5 views

PT-2022-23260 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6 Description: A remote code execution issue was found in sys info.php, allowing for potential code execution. Recommendations: For DedeBIZ version 6, consider restricting access to the sys info.php file until a patch is...

7.2CVSS7.5AI score0.15442EPSS
Exploits1References4
Rows per page
Query Builder