CVE-2022-36215

CVE-2022-36215 affects DedeBIZ v6; a remote code execution flaw exists in the sys_info.php component. Public entries consistently describe remote code execution via that file, with the root cause at the sys_info.php module. Impact details are that arbitrary code execution could be achieved on the...

CVE-2022-43196

CVE-2022-43196 affects dedecmdv6 v6.1.9. The vulnerability enables Arbitrary file deletion via the file_manage_control.php endpoint. The provided documents confirm the affected software and the specific function/file involved, but do not supply full root-cause details, affected environments beyon...

CVE-2022-44118

CVE-2022-44118 affects dedecmdv6 v6.1.9, with a Remote Code Execution (RCE) vulnerability via the file_manage_control.php endpoint. Public sources consistently identify an RCE risk in this version; details include the affected software (dedecmdv6 v6.1.9) and the vulnerable endpoint. The issue is ...

CVE-2022-44120

CVE-2022-44120 affects Dedecmdv6 (DedeCMS) v6.1.9. The vulnerability is an SQL Injection in the sys_sql_query.php component. This yields potential high-impact outcomes per CVSS data (CRITICAL, Confidentiality/Integrity/Availability HIGH). The connected sources confirm the affected software/file b...