Approved changes feed: RSS · Atom
cpe:2.3:a:dedebiz:dedebiz:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dedebiz (87ce7699-cf5f-570a-819e-2b8b7441b95a) |
|---|---|
| Product | Dedebiz (a38a9000-2e1c-5ebe-be3a-03a8fb7ffb5e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14648 |
vulnerable | 2026-06-08 07:06:34.892542 |
DedeBIZ catalog_add.php command injection
MEDIUM (4.7)
A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-12-14T07:02:06.834Z
Updated: 2026-02-24T05:49:31.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12927 |
vulnerable | 2026-06-08 07:04:31.212729 |
DedeBIZ archives_add.php sql injection
MEDIUM (4.7)
A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipulation of the argument flags[] leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-10T02:32:06.394Z
Updated: 2026-02-24T06:26:10.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12861 |
vulnerable | 2026-06-08 07:04:31.099388 |
DedeBIZ spec_add.php sql injection
MEDIUM (4.7)
A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipulation of the argument flags[] causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-07T16:02:05.050Z
Updated: 2026-02-24T06:24:35.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12860 |
vulnerable | 2026-06-08 07:04:31.099022 |
DedeBIZ freelist_main.php sql injection
MEDIUM (4.7)
A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderby results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2025-11-07T15:02:08.895Z
Updated: 2026-02-24T06:24:23.182Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12859 |
vulnerable | 2026-06-08 07:04:31.098490 |
DedeBIZ templets_one_edit.php sql injection
MEDIUM (4.7)
A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2025-11-07T15:02:06.353Z
Updated: 2026-02-24T06:24:10.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7904 |
vulnerable | 2026-06-08 06:58:23.879066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7181 |
vulnerable | 2026-06-08 06:21:57.201685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.