CVSS: 9.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-43196
https://notcve.org/view.php?id=CVE-2022-43196
23 Nov 2022 — dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php. dedecmdv6 v6.1.9 es vulnerable a la eliminación arbitraria de archivos a través de file_manage_control.php. • https://gist.github.com/yinfei6/f6c8a9ac39afae45c3f2aa32a7f1b205 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-44120
https://notcve.org/view.php?id=CVE-2022-44120
23 Nov 2022 — dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php. dedecmdv6 6.1.9 es vulnerable a la inyección SQL. a través de sys_sql_query.php. • https://gist.github.com/yinfei6/73295ac40b5b3fc0b55db58c17eecfda • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-44118
https://notcve.org/view.php?id=CVE-2022-44118
23 Nov 2022 — dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php. dedecmdv6 v6.1.9 es vulnerable a la Ejecución Remota de Código (RCE) a través de file_manage_control.php. • https://github.com/Athishpranav2003/CVE-2022-44118-Exploit •
CVSS: 8.3EPSS: 0%CPEs: 1EXPL: 1CVE-2022-36215
https://notcve.org/view.php?id=CVE-2022-36215
17 Aug 2022 — DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php. Se ha detectado que DedeBIZ versión v6, contiene una vulnerabilidad de ejecución de código remota en el archivo sys_info.php. • https://github.com/whitehatl/Vulnerability/blob/main/web/dedebiz/6.0.0/sys_info.poc.md •