Priority HIGH 82
An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2024-11-20 · No fix listed CWE-79
Priority HIGH 78
DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00675 · Published 2024-11-20 · No fix listed CWE-22
Priority HIGH 73
A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00592 · Published 2024-01-15 · No fix listed CWE-89
Priority HIGH 72
Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.49362 · Published 2023-12-14 · No fix listed CWE-79
Priority HIGH 71
A vulnerability, which was classified as critical, was found in DedeBIZ 6.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00662 · Published 2023-09-29 · No fix listed CWE-89
Priority HIGH 67
An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0072 · Published 2024-11-20 · No fix listed CWE-434
Priority MEDIUM 58
A security vulnerability has been detected in DedeBIZ up to 6.5.9.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.07284 · Published 2025-12-14 · No fix listed CWE-74
Priority MEDIUM 58
A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00459 · Published 2024-01-15 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as critical has been found in DedeBIZ 6.3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0066 · Published 2024-08-18 · No fix listed CWE-434
Priority MEDIUM 57
A vulnerability was found in DedeBIZ 6.3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2024-08-18 · No fix listed CWE-434
Priority MEDIUM 57
A vulnerability was found in DedeBIZ 6.3.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00722 · Published 2024-08-18 · No fix listed CWE-434
Priority MEDIUM 56
A security vulnerability has been detected in DedeBIZ up to 6.3.2.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00326 · Published 2025-11-10 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability was determined in DedeBIZ up to 6.3.2.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00326 · Published 2025-11-07 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability was found in DedeBIZ up to 6.3.2.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00326 · Published 2025-11-07 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability has been found in DedeBIZ up to 6.3.2.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00326 · Published 2025-11-07 · No fix listed CWE-74
Priority MEDIUM 51
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0114 · Published 2023-09-26 · No fix listed CWE-94
Priority MEDIUM 50
dedecmdv6 6.1.9 is vulnerable to SQL Injection.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00725 · Published 2022-11-23 · No fix listed CWE-89
Priority MEDIUM 46
dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01815 · Published 2022-11-23 · No fix listed
Priority MEDIUM 41
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00748 · Published 2022-11-23 · No fix listed
Priority LOW 36
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02309 · Published 2022-08-17 · No fix listed
Priority LOW 33
A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00839 · Published 2023-12-30 · No fix listed CWE-434
Priority LOW 33
A vulnerability was found in DedeBIZ 6.2 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00701 · Published 2023-12-13 · No fix listed CWE-89
Priority LOW 33
A vulnerability was found in DedeBIZ 6.2 and classified as critical.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00618 · Published 2023-09-29 · No fix listed CWE-89
Priority LOW 33
A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00678 · Published 2023-07-23 · No fix listed CWE-89
Priority LOW 27
A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00286 · Published 2024-08-29 · No fix listed CWE-79
Load more
THREATIST.IORead the docs