Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2024/01/15 5:15 p.m.•18 views

CVE-2024-0558

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS6AI score0.00592EPSS
SaveExploits1References3
Mend
Mend
•added 2024/01/15 5:00 p.m.•8 views

CVE-2024-0558

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS0.00592EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/15 12:00 a.m.•17 views

DedeBIZ SQL Injection Vulnerability

DedeBIZ is a content management system from China Muyun Intelligent Technology DedeBIZ company. A SQL injection vulnerability exists in DedeBIZ version 6.3.0, which originates from the presence of unknown code in /admin/makehtmlfreelistaction.php, leading to SQL injection via the parameter starti...

7.2CVSS8.1AI score0.00592EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/15 12:00 a.m.•9 views

CVE-2024-0558: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

7.2CVSS5.7AI score0.00592EPSS
SaveExploits1References2
NVD
NVD
•added 2001/05/03 4:00 a.m.•19 views

CVE-2001-0305

Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. dot dot in the StartID parameter...

5CVSS6.6AI score0.06476EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/04/04 12:00 a.m.•7 views

CVE-2001-0305: Undefined Security Weakness

Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. dot dot in the StartID parameter...

5CVSS6AI score0.06476EPSS
SaveExploits2References1
Rows per page
Query Builder