Dedebiz vulnerabilities

Products

• Dedebiz 27
• Dedecmsv6 4

Newest

• dedebiz DedeBIZ catalog_add.php command injection CVE-2025-14648 5.1 MediumDecember 14, 2025
• dedebiz DedeBIZ archives_add.php sql injection CVE-2025-12927 5.1 MediumNovember 10, 2025
• dedebiz DedeBIZ spec_add.php sql injection CVE-2025-12861 5.1 MediumNovember 7, 2025
• dedebiz DedeBIZ freelist_main.php sql injection CVE-2025-12860 5.1 MediumNovember 7, 2025
• dedebiz DedeBIZ templets_one_edit.php sql injection CVE-2025-12859 5.1 MediumNovember 7, 2025
• dedebiz DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the... CVE-2024-52771 9.1 CriticalNovember 20, 2024
• dedebiz An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6... CVE-2024-52770 9.8 CriticalNovember 20, 2024
• dedebiz An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0... CVE-2024-52769 7.2 HighNovember 20, 2024
• dedebiz A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute... CVE-2024-44717 6.1 MediumAugust 29, 2024
• dedebiz A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute... CVE-2024-44716 6.1 MediumAugust 29, 2024
• dedebiz DedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload CVE-2024-7906 5.3 MediumAugust 18, 2024
• dedebiz DedeBIZ archives_do.php AdminUpload unrestricted upload CVE-2024-7905 5.3 MediumAugust 18, 2024
• dedebiz DedeBIZ File Extension file_manage_control.php unrestricted upload CVE-2024-7904 5.3 MediumAugust 18, 2024
• dedebiz DedeBIZ File Extension media_add.php unrestricted upload CVE-2024-7903 5.3 MediumAugust 18, 2024
• dedebiz DedeBIZ makehtml_freelist_action.php sql injection CVE-2024-0558 4.7 MediumJanuary 15, 2024
• dedebiz DedeBIZ Website Copyright Setting cross site scripting CVE-2024-0557 2.4 LowJanuary 15, 2024
• dedebiz Muyun DedeBIZ Add Attachment unrestricted upload CVE-2023-7181 4.7 MediumDecember 30, 2023
• dedebiz Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code... CVE-2023-31546 Public exploit EPSS 49.4% 9.6 CriticalDecember 14, 2023
• dedebiz DedeBIZ content_batchup_action.php sql injection CVE-2023-6755 4.7 MediumDecember 13, 2023
• dedebiz DedeBIZ makehtml_taglist_action.php sql injection CVE-2023-5268 6.3 MediumSeptember 29, 2023
• dedebiz DedeBIZ tags_main.php sql injection CVE-2023-5266 6.3 MediumSeptember 29, 2023
• dedebiz DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at... CVE-2023-43234 9.8 CriticalSeptember 26, 2023
• dedebiz A stored cross-site scripting (XSS) vulnerability in the Website column management function of... CVE-2023-43232 5.4 MediumSeptember 26, 2023
• dedebiz DedeBIZ Article cross site scripting CVE-2023-4170 3.5 LowAugust 5, 2023
• dedebiz DedeBIZ sys_sql_query.php sql injection CVE-2023-3839 4.1 MediumJuly 23, 2023
• dedebiz DedeBIZ vote_edit.php cross site scripting CVE-2023-3838 2.4 LowJuly 23, 2023
• dedebiz DedeBIZ sys_sql_query.php cross site scripting CVE-2023-3837 2.4 LowJuly 22, 2023
• dedebiz dedecmsv6 dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php. CVE-2022-44120 9.8 CriticalNovember 23, 2022
• dedebiz dedecmsv6 dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php. CVE-2022-44118 Public exploit 9.8 CriticalNovember 23, 2022
• dedebiz dedecmsv6 dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php. CVE-2022-43196 9.1 CriticalNovember 23, 2022
• dedebiz dedecmsv6 DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php. CVE-2022-36215 7.2 HighAugust 17, 2022