Lucene search
+L

291 matches found

Cvelist
Cvelist
•added 2023/07/23 1:31 a.m.•46 views

CVE-2023-3838 DedeBIZ vote_edit.php cross site scripting

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

3.3CVSS5AI score0.00604EPSS
SaveExploits1References3
OSV
OSV
•added 2023/07/23 1:31 a.m.•26 views

CVE-2023-3838 DedeBIZ vote_edit.php cross site scripting

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

2.4CVSS3.8AI score
SaveExploits0References5
CVE
CVE
•added 2023/07/23 1:31 a.m.•70 views

CVE-2023-3838

CVE-2023-3838 affects DedeBIZ 6.2.10. The vulnerability is an XSS in an unknown function within the file /admin/vote_edit.php, allowing remote exploitation. Exploit details are publicly disclosed. Remediation if not patched: as a temporary control, disable or restrict access to /admin/vote_edit.p...

4.8CVSS4.2AI score0.00604EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/23 12:00 a.m.•5 views

CVE-2023-3838: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/voteedit.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and...

4.8CVSS3.6AI score0.00604EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/23 12:00 a.m.•19 views

PT-2023-26391 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue was found in DedeBIZ, affecting an unknown functionality of the file /admin/vote edit.php. This issue leads to cross site scripting and can be launched remotely. The exploit has been...

4.8CVSS3.8AI score0.00604EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/07/23 12:00 a.m.•17 views

PT-2023-26398 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic issue has been found in DedeBIZ, affecting some unknown functionality of the file /admin/sys sql query.php. The manipulation of the sqlquery argument leads to sql injection. The attack can be...

7.2CVSS5.1AI score0.00678EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/07/23 12:00 a.m.•19 views

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which originates from an unknown function in the file /admin/voteedit.php, resulting in cross-site scripting...

4.8CVSS3.9AI score0.00604EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/23 12:00 a.m.•17 views

DedeBIZ SQL注入漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A SQL injection vulnerability exists in DedeBIZ version 6.2.10, which stems from a SQL injection vulnerability in the parameter sqlquery...

7.2CVSS5.7AI score0.00678EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/23 12:00 a.m.•6 views

CVE-2023-3839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...

7.2CVSS5.4AI score0.00678EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/22 9:15 p.m.•38 views

CVE-2023-3837

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

4.8CVSS3.9AI score0.00715EPSS
SaveExploits1References3
Prion
Prion
•added 2023/07/22 9:15 p.m.•30 views

Cross site scripting

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

2.6CVSS4.9AI score0.00715EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2023/07/22 8:31 p.m.•2 views

CVE-2023-3837

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

4.8CVSS0.00715EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2023/07/22 8:31 p.m.•15 views

CVE-2023-3837 DedeBIZ sys_sql_query.php cross site scripting

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

2.6CVSS6AI score0.00715EPSS
SaveExploits1References3
OSV
OSV
•added 2023/07/22 8:31 p.m.•18 views

CVE-2023-3837 DedeBIZ sys_sql_query.php cross site scripting

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

2.4CVSS3.8AI score
SaveExploits0References5
CVE
CVE
•added 2023/07/22 8:31 p.m.•73 views

CVE-2023-3837

CVE-2023-3837 affects DedeBIZ 6.2.10, with an unknown function in /admin/sys_sql_query.php that enables cross-site scripting. The issue can be exploited remotely and has public exploit disclosure. Root cause: manipulation of an internal function/file leading to XSS. Impact is listed as cross-site...

4.8CVSS4.2AI score0.00715EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/07/22 8:31 p.m.•55 views

CVE-2023-3837 DedeBIZ sys_sql_query.php cross site scripting

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

2.6CVSS5.1AI score0.00715EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/07/22 12:00 a.m.•16 views

DedeBIZ 跨站脚本漏洞

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A cross-site scripting vulnerability exists in DedeBIZ version 6.2.10, which originates from the presence of an unknown function in the file /admin/syssqlquery.php, resulting in cross-site scripting...

4.8CVSS3.9AI score0.00715EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/07/22 12:00 a.m.•21 views

PT-2023-26388 · Dedebiz · Dedebiz

Name of the Vulnerable Software and Affected Versions: DedeBIZ version 6.2.10 Description: A problematic vulnerability has been found in DedeBIZ, affecting an unknown function of the file /admin/sys sql query.php. The manipulation leads to cross site scripting. It is possible to launch the attack...

4.8CVSS3.7AI score0.00715EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/22 12:00 a.m.•3 views

CVE-2023-3837: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

4.8CVSS3.7AI score0.00715EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2022/11/10 12:00 a.m.•24 views

DedeBIZ Remote Code Execution (CVE-2022-36215)

A remote code execution vulnerability exists in DedeBIZ. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

5.4AI score0.02289EPSS
SaveExploits1
Rows per page
Query Builder