| Название | SQL injection vulnerability exists in DedeBIZ V6.2 in /src/admin/tags_main.php |
|---|
| Описание | The DedeBIZ system is developed based on PHP7 version, has strong scalability, and is completely open source. DedeBIZ supports design and development using the popular Go language. It is easy to use, flexible and expandable, and is more secure and efficient. Simple template design and production has always been a major feature of the system. It continues the previous tags and uses the responsive template engine Bootstrap as the system template rendering engine, making it easier to build cross-terminal and mobile full-media sites.
[Suggested description]
SQL injection vulnerability exists in DedeBIZ V6.2 in /src/admin/tags_main.php
[Vulnerability Type]
SQL INJECTION
[Vendor of Product]
https://github.com/DedeBIZ/DedeV6
[Affected Product Code Base]
DedeBIZ V6.2
[Affected Component]
File： /src/admin/tags_main.php
Parameter： ids
[Attack Type]
Remote |
|---|
| Источник | ⚠️ https://github.com/yhy217/dedebiz--vul/issues/1 |
|---|
| Пользователь | jamspilly (UID 54414) |
|---|
| Представление | 21.09.2023 07:10 (3 лет назад) |
|---|
| Модерация | 29.09.2023 07:44 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 240879 [DedeBIZ 6.2 /src/admin/tags_main.php ids SQL-инъекция] |
|---|
| Баллы | 20 |
|---|