CVE-2025-12861: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/specadd.php. This manipulation of the argument flags causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

EUVD-2023-52153

Malicious code in bioql PyPI...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

Cross site scripting

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068: Improper Neutralization of Input During Web Page Generation

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 was discovered to contain a Cross-site Scripting XSS vulnerability via specadd.php...

CVE-2023-48068

DedeCMS v6.2 is affected by a Cross-site Scripting (XSS) issue in the file spec_add.php. The vulnerability is confirmed in multiple sources and is described as an XSS via spec_add.php. CVSS v3.1 base score 5.4 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Low, U...