Vulnerabilities

TI-2022-21686 CVE-2022-44120 · GHSA-77gf-xcq5-37mm

dedecmdv6 6.1.9 is vulnerable to SQL Injection.

MEDIUM 50

dedecmdv6 6.1.9 is vulnerable to SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00725 Published 2022-11-23 No fix listed CWE-89

TI-2022-21685 CVE-2022-44118 · GHSA-vgxg-m86c-5jm8

MEDIUM 46

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01815 Published 2022-11-23 No fix listed

TI-2022-21073 CVE-2022-43196 · GHSA-4f5x-cggh-2x55

MEDIUM 41

dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00748 Published 2022-11-23 No fix listed

TI-2022-16595 CVE-2022-36215 · GHSA-4qqv-mf3r-gff4

LOW 36

DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02309 Published 2022-08-17 No fix listed