Latest vulnerabilities for vendor "dedebiz"

9.8

First published (updated )

CVE-2024-52770

Dedecms v6Malicious File Upload

7.2

First published (updated )

CVE-2024-52769

Dedecms v6Path Traversal

9.1

First published (updated )

CVE-2024-52771

Dedecms v6XSS

6.1

First published (updated )

CVE-2024-44716

Dedecms v6XSS

6.1

First published (updated )

CVE-2024-44717

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Dedecms v6DedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload

8.8

EPSS

0.07%

First published (updated )

CVE-2024-7906

Dedecms v6DedeBIZ archives_do.php AdminUpload unrestricted upload

7.2

EPSS

0.21%

First published (updated )

CVE-2024-7905

Dedecms v6DedeBIZ File Extension file_manage_control.php unrestricted upload

8.8

EPSS

0.17%

First published (updated )

CVE-2024-7904

Dedecms v6DedeBIZ File Extension media_add.php unrestricted upload

8.8

EPSS

0.17%

First published (updated )

CVE-2024-7903

Dedecms v6DedeBIZ makehtml_freelist_action.php sql injection

7.2

EPSS

0.06%

First published (updated )

CVE-2024-0558

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Dedecms v6DedeBIZ Website Copyright Setting cross site scripting

5.4

EPSS

0.05%

First published (updated )

CVE-2024-0557

Dedecms v6Muyun DedeBIZ Add Attachment unrestricted upload

7.2

EPSS

0.09%

First published (updated )

CVE-2023-7181

Dedecms v6XSS

9.6

First published (updated )

CVE-2023-31546

Dedecms v6DedeBIZ content_batchup_action.php sql injection

7.2

EPSS

0.06%

First published (updated )

CVE-2023-6755

Dedecms v6DedeBIZ makehtml_taglist_action.php sql injection

7.2

First published (updated )

CVE-2023-5268

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Dedecms v6DedeBIZ tags_main.php sql injection

8.8

First published (updated )

CVE-2023-5266

Dedecms v6XSS

5.4

First published (updated )

CVE-2023-43232

Dedecms v6Code Injection

9.8

First published (updated )

CVE-2023-43234

Dedecms v6DedeBIZ Article cross site scripting

4.8

First published (updated )

CVE-2023-4170

Dedecms v6DedeBIZ sys_sql_query.php sql injection

7.2

First published (updated )

CVE-2023-3839

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Dedecms v6DedeBIZ vote_edit.php cross site scripting

4.8

First published (updated )

CVE-2023-3838

Dedecms v6DedeBIZ sys_sql_query.php cross site scripting

4.8

First published (updated )

CVE-2023-3837

Dedecms v6dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.

9.1

First published (updated )

CVE-2022-43196

Dedecms v6dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

9.8

First published (updated )

CVE-2022-44118

Dedecms v6SQL Injection

9.8

First published (updated )

CVE-2022-44120

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Dedecms v6DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.