CVE-2023-43234 | BDVDB-2026-212633 Detail

Description#

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

https://github.com/yux1azhengye
https://github.com/yux1azhengye/mycve/blob/main/DedeBIZ_v6.2.11_RCE.pdf
https://www.dedebiz.com

Exploit#

No public exploit known

History#

Version 12023-09-26Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.