Vulnerabilities

TI-2025-13385 CVE-2025-14648 · GHSA-rf9w-8fhj-jfq2

DedeBIZ catalog_add.php command injection

MEDIUM 58

A security vulnerability has been detected in DedeBIZ up to 6.5.9.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.07284 Published 2025-12-14 No fix listed CWE-74

TI-2025-11844 CVE-2025-12927 · GHSA-qf35-h73j-5vfh

DedeBIZ archives_add.php sql injection

MEDIUM 56

A security vulnerability has been detected in DedeBIZ up to 6.3.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00326 Published 2025-11-10 No fix listed CWE-74

TI-2025-11781 CVE-2025-12861 · GHSA-v7p2-phgw-4fh4

DedeBIZ spec_add.php sql injection

MEDIUM 56

A vulnerability was determined in DedeBIZ up to 6.3.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00326 Published 2025-11-07 No fix listed CWE-74

TI-2025-11780 CVE-2025-12860 · GHSA-3fv2-ccqm-h3x9

DedeBIZ freelist_main.php sql injection

MEDIUM 56

A vulnerability was found in DedeBIZ up to 6.3.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00326 Published 2025-11-07 No fix listed CWE-74

TI-2025-11779 CVE-2025-12859 · GHSA-p5v7-wc9g-p479

DedeBIZ templets_one_edit.php sql injection

MEDIUM 56

A vulnerability has been found in DedeBIZ up to 6.3.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00326 Published 2025-11-07 No fix listed CWE-74

TI-2024-35293 CVE-2024-52771 · GHSA-xx8w-4q6h-66xg

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the…

HIGH 78

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00675 Published 2024-11-20 No fix listed CWE-22

TI-2024-35292 CVE-2024-52770 · GHSA-627r-gc28-6645

An arbitrary file upload vulnerability in the component /admin/file_manage_control of…

HIGH 82

An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2024-11-20 No fix listed CWE-79

TI-2024-35291 CVE-2024-52769 · GHSA-h4c9-8j9c-xf43

An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ…

HIGH 67

An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0072 Published 2024-11-20 No fix listed CWE-434

TI-2024-29964 CVE-2024-44717 · GHSA-g9q9-268w-xmvw

A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute…

LOW 27

A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2024-08-29 No fix listed CWE-79

TI-2024-29963 CVE-2024-44716 · GHSA-jpqh-p3f6-x53r

A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute…

LOW 27

A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2024-08-29 No fix listed CWE-79

TI-2024-07328 CVE-2024-7906 · GHSA-pg89-rxqx-q64g

DedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload

LOW 25

A vulnerability classified as critical was found in DedeBIZ 6.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00479 Published 2024-08-18 No fix listed CWE-434

TI-2024-07327 CVE-2024-7905 · GHSA-7xqv-5hvv-gjq5

DedeBIZ archives_do.php AdminUpload unrestricted upload

MEDIUM 57

A vulnerability classified as critical has been found in DedeBIZ 6.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0066 Published 2024-08-18 No fix listed CWE-434

TI-2024-07326 CVE-2024-7904 · GHSA-x7hj-mvwg-j9gc

DedeBIZ File Extension file_manage_control.php unrestricted upload

MEDIUM 57

A vulnerability was found in DedeBIZ 6.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00665 Published 2024-08-18 No fix listed CWE-434

TI-2024-07325 CVE-2024-7903 · GHSA-992c-f4fm-rxm2

DedeBIZ File Extension media_add.php unrestricted upload

MEDIUM 57

A vulnerability was found in DedeBIZ 6.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00722 Published 2024-08-18 No fix listed CWE-434

TI-2024-00516 CVE-2024-0558 · GHSA-8j28-ccxg-gg78

DedeBIZ makehtml_freelist_action.php sql injection

HIGH 73

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00592 Published 2024-01-15 No fix listed CWE-89

TI-2024-00515 CVE-2024-0557 · GHSA-hv6v-4hxj-p9h8

DedeBIZ Website Copyright Setting cross site scripting

MEDIUM 58

A vulnerability, which was classified as problematic, was found in DedeBIZ 6.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00459 Published 2024-01-15 No fix listed CWE-79

TI-2023-06568 CVE-2023-7181 · GHSA-65gm-992v-m56v

Muyun DedeBIZ Add Attachment unrestricted upload

LOW 33

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00839 Published 2023-12-30 No fix listed CWE-434

TI-2023-15114 CVE-2023-31546 · GHSA-4ppj-757r-h8qc

Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run…

HIGH 72

Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.49362 Published 2023-12-14 No fix listed CWE-79

TI-2023-06172 CVE-2023-6755 · GHSA-8mh5-7w36-hpgv

DedeBIZ content_batchup_action.php sql injection

LOW 33

A vulnerability was found in DedeBIZ 6.2 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00701 Published 2023-12-13 No fix listed CWE-89

TI-2023-04844 CVE-2023-5268 · GHSA-2cwv-7h96-mp7x

DedeBIZ makehtml_taglist_action.php sql injection

LOW 33

A vulnerability was found in DedeBIZ 6.2 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00618 Published 2023-09-29 No fix listed CWE-89

TI-2023-04842 CVE-2023-5266 · GHSA-rq33-vcqg-6whp

DedeBIZ tags_main.php sql injection

HIGH 71

A vulnerability, which was classified as critical, was found in DedeBIZ 6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00662 Published 2023-09-29 No fix listed CWE-89

TI-2023-23146 CVE-2023-43234 · GHSA-fg7v-q6g2-52wh

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE)…

MEDIUM 51

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0114 Published 2023-09-26 No fix listed CWE-94

TI-2023-23144 CVE-2023-43232 · GHSA-rc6w-rqhv-6xv3

A stored cross-site scripting (XSS) vulnerability in the Website column management…

LOW 25

A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title param…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00368 Published 2023-09-26 No fix listed CWE-79

TI-2023-03859 CVE-2023-4170 · GHSA-j72r-vx3w-c4m5

DedeBIZ Article cross site scripting

LOW 23

A vulnerability was found in DedeBIZ 6.2.10.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00613 Published 2023-08-05 No fix listed CWE-79

TI-2023-03588 CVE-2023-3839 · GHSA-6v97-gjrh-7ffr

DedeBIZ sys_sql_query.php sql injection

LOW 33

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00678 Published 2023-07-23 No fix listed CWE-89

Vulnerabilities

Filters