Dedebiz

Records31All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Dedebiz records in CISA KEV

No Dedebiz vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Dedecmsv6 · all components

TI-2022-21686 CVE-2022-44120 · GHSA-77gf-xcq5-37mm

MEDIUM 50

dedecmdv6 6.1.9 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00725 Published 2022-11-23 No fix listed CWE-89

TI-2022-21685 CVE-2022-44118 · GHSA-vgxg-m86c-5jm8

MEDIUM 46

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01815 Published 2022-11-23 No fix listed

TI-2022-21073 CVE-2022-43196 · GHSA-4f5x-cggh-2x55

MEDIUM 41

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00748 Published 2022-11-23 No fix listed

TI-2022-16595 CVE-2022-36215 · GHSA-4qqv-mf3r-gff4

LOW 36

DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02309 Published 2022-08-17 No fix listed