GCVE - cpe:2.3:a:dedebiz:dedebiz:6.3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dedebiz:dedebiz:6.3.0:*:*:*:*:*:*:*

part: a version: 6.3.0 update: *

Vendor	Dedebiz (`87ce7699-cf5f-570a-819e-2b8b7441b95a`)
Product	Dedebiz (`a38a9000-2e1c-5ebe-be3a-03a8fb7ffb5e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7906`	vulnerable	2026-06-08 06:58:23.880793	DedeBIZ Attachment Settings select_images_post.php get_mime_type unrestricted upload MEDIUM (6.3) A vulnerability classified as critical was found in DedeBIZ 6.3.0. This vulnerability affects the function get_mime_type of the file /admin/dialog/select_images_post.php of the component Attachment Settings. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-08-18T13:31:04.550Z Updated: 2024-08-20T19:54:36.347Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275032 https://vuldb.com/?ctiid.275032 https://vuldb.com/?submit.388363 https://github.com/DeepMountains/Mirage/blob/main/CVE17-4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7905`	vulnerable	2026-06-08 06:58:23.879986	DedeBIZ archives_do.php AdminUpload unrestricted upload MEDIUM (6.3) A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archives_do.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-08-18T11:31:04.281Z Updated: 2024-08-19T14:07:31.425Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275031 https://vuldb.com/?ctiid.275031 https://vuldb.com/?submit.388362 https://github.com/DeepMountains/Mirage/blob/main/CVE17-3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7904`	vulnerable	2026-06-08 06:58:23.879318	DedeBIZ File Extension file_manage_control.php unrestricted upload MEDIUM (6.3) A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/file_manage_control.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-08-18T08:31:03.907Z Updated: 2024-08-19T16:50:38.182Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275030 https://vuldb.com/?ctiid.275030 https://vuldb.com/?submit.388361 https://github.com/DeepMountains/Mirage/blob/main/CVE17-2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7903`	vulnerable	2026-06-08 06:58:23.876263	DedeBIZ File Extension media_add.php unrestricted upload MEDIUM (6.3) A vulnerability was found in DedeBIZ 6.3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/media_add.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-08-18T07:00:06.051Z Updated: 2024-08-19T17:45:38.922Z Open on db.gcve.eu Reference links https://vuldb.com/?id.275029 https://vuldb.com/?ctiid.275029 https://vuldb.com/?submit.388360 https://github.com/DeepMountains/Mirage/blob/main/CVE17-1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52771`	vulnerable	2026-06-08 06:52:16.206556	Details available DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view. Published: 2024-11-20T00:00:00.000Z Updated: 2024-11-27T17:05:17.390Z Open on db.gcve.eu Reference links https://github.com/DedeBIZ/DedeV6/ https://co-a1natas.feishu.cn/docx/Zsd9dnGUvoBW6tx0G5fcVx6vnBb	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52770`	vulnerable	2026-06-08 06:52:16.205987	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52769`	vulnerable	2026-06-08 06:52:16.205458	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44717`	vulnerable	2026-06-08 06:45:54.136956	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44716`	vulnerable	2026-06-08 06:45:54.136540	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0558`	vulnerable	2026-06-08 06:22:01.353189	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0557`	vulnerable	2026-06-08 06:22:01.352411	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.