CVE-2023-3837: DedeBIZ sys_sql_query.php cross site scripting
A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235188. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-3837?
CVE-2023-3837 is a vulnerability found in DedeBIZ 6.2.10 that allows for cross-site scripting (XSS) attacks.
How severe is CVE-2023-3837?
CVE-2023-3837 has a severity rating of 4.8, classified as medium.
What software is affected by CVE-2023-3837?
DedeBIZ version 6.2.10 is affected by CVE-2023-3837.
How can CVE-2023-3837 be exploited?
CVE-2023-3837 can be exploited remotely by manipulating an unknown function in the file /admin/sys_sql_query.php to carry out cross-site scripting attacks.
Are there any fixes available for CVE-2023-3837?
At the moment, there is no known fix for CVE-2023-3837. It is recommended to stay updated with the latest security patches and follow the guidance of the vendor.