Dedebiz Dedecmsv6 — known CVE vulnerabilities

Every CVE whose affected-product data names Dedebiz Dedecmsv6, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-44118 — CVSS 9.8 (critical): dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.
• CVE-2022-44120 — CVSS 9.8 (critical): dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php.
• CVE-2022-43196 — CVSS 9.1 (critical): dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.
• CVE-2022-36215 — CVSS 7.2 (high): DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.