CVE-2023-5268: DedeBIZ makehtml_taglist_action.php sql injection
A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240881 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5268?
CVE-2023-5268 has been classified as critical due to its potential for remote SQL injection.
How do I fix CVE-2023-5268?
To fix CVE-2023-5268, it is recommended to update DedeBIZ to the latest version that addresses this vulnerability.
What is the impact of CVE-2023-5268?
The impact of CVE-2023-5268 includes unauthorized access to the database through SQL injection, which can lead to data breaches.
Which versions of DedeBIZ are affected by CVE-2023-5268?
CVE-2023-5268 affects DedeBIZ version 6.2.
Can CVE-2023-5268 be exploited remotely?
Yes, CVE-2023-5268 can be exploited remotely, allowing attackers to execute malicious SQL queries.