EUVD-2022-47071

Malicious code in bioql PyPI...

EUVD-2022-46240

Malicious code in bioql PyPI...

EUVD-2022-47069

Malicious code in bioql PyPI...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

CVE-2022-43196

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

CVE-2022-43196

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-43196

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

Sql injection

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

Arbitrary file deletion

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...

CVE-2022-44118

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution RCE via filemanagecontrol.php...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

CVE-2022-44120

CVE-2022-44120 affects Dedecmdv6 (DedeCMS) v6.1.9. The vulnerability is an SQL Injection in the sys_sql_query.php component. This yields potential high-impact outcomes per CVSS data (CRITICAL, Confidentiality/Integrity/Availability HIGH). The connected sources confirm the affected software/file b...

CVE-2022-43196

CVE-2022-43196 affects dedecmdv6 v6.1.9. The vulnerability enables Arbitrary file deletion via the file_manage_control.php endpoint. The provided documents confirm the affected software and the specific function/file involved, but do not supply full root-cause details, affected environments beyon...

PT-2022-27115 · Dedecmdv6 · Dedecmdv6

Name of the Vulnerable Software and Affected Versions: dedecmdv6 version 6.1.9 Description: The issue is related to SQL Injection. It affects the sys sql query.php file. Recommendations: For dedecmdv6 version 6.1.9, consider restricting access to the sys sql query.php file until a patch is...

CVE-2022-44120

dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...

PT-2022-27114 · Dedecmdv6 · Dedecmdv6

Name of the Vulnerable Software and Affected Versions: dedecmdv6 version 6.1.9 Description: The issue allows for Remote Code Execution RCE via the file manage control.php endpoint. Recommendations: For dedecmdv6 version 6.1.9, consider restricting access to the file manage control.php endpoint...