Lucene search
+L

291 matches found

NVD
NVD
•added 2024/01/15 5:15 p.m.•31 views

CVE-2024-0558

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS5.9AI score0.00592EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/15 5:15 p.m.•18 views

CVE-2024-0557

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

5.4CVSS3.9AI score0.00459EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/15 5:15 p.m.•24 views

CVE-2024-0557

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

5.4CVSS3.9AI score0.00459EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/15 5:15 p.m.•22 views

Sql injection

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

5.8CVSS7.7AI score0.00592EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2024/01/15 5:15 p.m.•38 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

3.3CVSS6.3AI score0.00459EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2024/01/15 5:00 p.m.•3 views

CVE-2024-0558

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS0.00592EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/01/15 5:00 p.m.•10 views

CVE-2024-0558 DedeBIZ makehtml_freelist_action.php sql injection

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

5.8CVSS7.6AI score0.00592EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/15 5:00 p.m.•51 views

CVE-2024-0558

CVE-2024-0558 : Affected product is DedeBIZ 6.3.0. The vulnerability occurs in unknown code within the file /admin/makehtml_freelist_action.php, where manipulation of the startid parameter enables SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly; mult...

7.2CVSS7.3AI score0.00592EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/15 5:00 p.m.•46 views

CVE-2024-0558 DedeBIZ makehtml_freelist_action.php sql injection

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

5.8CVSS7.5AI score0.00592EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/15 4:31 p.m.•57 views

CVE-2024-0557

CVE-2024-0557 affects DedeBIZ 6.3.0, specifically the Website Copyright Setting component. The vulnerability enables cross-site scripting and can be exploited remotely; exploitation status is public, and the vendor did not respond to disclosure. Several connected sources confirm the issue and sco...

5.4CVSS5.2AI score0.00459EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/15 4:31 p.m.•24 views

CVE-2024-0557 DedeBIZ Website Copyright Setting cross site scripting

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

3.3CVSS5.2AI score0.00459EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/15 4:31 p.m.•35 views

CVE-2024-0557 DedeBIZ Website Copyright Setting cross site scripting

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

3.3CVSS5.4AI score0.00459EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/15 12:00 a.m.•14 views

DedeBIZ Cross-Site Scripting Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.3.0, which stems from an unknown section in the component Website Copyright Setting, leading to cross-site scripting...

5.4CVSS5.9AI score0.00459EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•4 views

CVE-2024-0557: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0. This affects an unknown part of the component Website Copyright Setting. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

5.4CVSS3.8AI score0.00459EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/15 12:00 a.m.•15 views

PT-2024-15657 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: A critical vulnerability has been found in DedeBIZ, affecting unknown code in the file /admin/makehtml freelist action.php. The manipulation of the startid argument leads to SQL injection. The attack can be...

7.2CVSS5.9AI score0.00592EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/01/15 12:00 a.m.•18 views

PT-2024-15656 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.3.0 Description: A vulnerability was found in the Website Copyright Setting component, which can be exploited remotely. The manipulation leads to cross site scripting. The vendor was contacted about this disclosure but did n...

5.4CVSS6.2AI score0.00459EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•9 views

CVE-2024-0558: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS5.7AI score0.00592EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/15 12:00 a.m.•14 views

DedeBIZ SQL Injection Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A SQL injection vulnerability exists in DedeBIZ version 6.3.0, which originates from the presence of unknown code in /admin/makehtmlfreelistaction.php, leading to SQL injection via the parameter starti...

7.2CVSS8.1AI score0.00592EPSS
SaveExploits1References4
OSV
OSV
•added 2023/12/30 6:15 p.m.•17 views

CVE-2023-7181

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

7.2CVSS5.3AI score0.00839EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/30 6:15 p.m.•28 views

CVE-2023-7181

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

7.2CVSS0.00839EPSS
SaveExploits1References3
Rows per page
Query Builder