| शीर्षक | DedeBIZ 6.5.9 Code Injection |
|---|
| विवरण | Some backend modules of DedeBIZ (DedeCMS Commercial Edition) fail to perform security validation on file content when processing user input, allowing attackers with backend privileges to directly write arbitrary PHP code into server files. Attackers can use this feature to write files containing malicious PHP code, and then access those files to trigger code execution, thereby achieving remote code execution (RCE). |
|---|
| स्रोत | ⚠️ https://github.com/HOrange147/CVE/blob/main/DedeBIZ%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C.pdf |
|---|
| उपयोगकर्ता | formanagain (UID 93347) |
|---|
| सबमिशन | 09/12/2025 11:01 AM (10 महीनों पहले) |
|---|
| संयम | 13/12/2025 10:09 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 336381 [DedeBIZ तक 6.5.9 catalog_add.php अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|