https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14648.htmlhttps://patchthecve.com/cve/CVE-2025-14648.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in DedeBIZ up to 6.5.9. Affected by this vulnerability is an unknown functionality of the file /src/admin/catalog_add.php. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly anhttps://patchthecve.com/cve/CVE-2025-12927.htmlhttps://patchthecve.com/cve/CVE-2025-12927.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 4.7: A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the file /admin/archives_add.php. Such manipulation of the argument flags[] leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may bhttps://patchthecve.com/cve/CVE-2025-12861.htmlhttps://patchthecve.com/cve/CVE-2025-12861.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 4.7: A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipulation of the argument flags[] causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosehttps://patchthecve.com/cve/CVE-2025-12860.htmlhttps://patchthecve.com/cve/CVE-2025-12860.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 4.7: A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php. The manipulation of the argument orderby results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.https://patchthecve.com/cve/CVE-2025-12859.htmlhttps://patchthecve.com/cve/CVE-2025-12859.htmlMon, 19 Oct 2026 13:10:00 +0000MEDIUM 4.7: A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_edit.php. The manipulation of the argument ids leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2024-52771.htmlhttps://patchthecve.com/cve/CVE-2024-52771.htmlWed, 17 Jun 2026 08:07:36 +0000CRITICAL 9.1: DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view.https://patchthecve.com/cve/CVE-2024-52770.htmlhttps://patchthecve.com/cve/CVE-2024-52770.htmlWed, 17 Jun 2026 08:07:36 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2024-52769.htmlhttps://patchthecve.com/cve/CVE-2024-52769.htmlWed, 17 Jun 2026 08:07:36 +0000HIGH 7.2: An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.https://patchthecve.com/cve/CVE-2024-44717.htmlhttps://patchthecve.com/cve/CVE-2024-44717.htmlWed, 17 Jun 2026 07:53:02 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.https://patchthecve.com/cve/CVE-2024-44716.htmlhttps://patchthecve.com/cve/CVE-2024-44716.htmlWed, 17 Jun 2026 07:53:02 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.https://patchthecve.com/cve/CVE-2024-7906.htmlhttps://patchthecve.com/cve/CVE-2024-7906.htmlWed, 17 Jun 2026 08:21:09 +0000MEDIUM 6.3: A vulnerability classified as critical was found in DedeBIZ 6.3.0. This vulnerability affects the function get_mime_type of the file /admin/dialog/select_images_post.php of the component Attachment Settings. The manipulation of the argument upload leads to unrestricted upload. The attack can be inithttps://patchthecve.com/cve/CVE-2024-7905.htmlhttps://patchthecve.com/cve/CVE-2024-7905.htmlWed, 17 Jun 2026 08:21:09 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in DedeBIZ 6.3.0. This affects the function AdminUpload of the file admin/archives_do.php. The manipulation of the argument litpic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to thehttps://patchthecve.com/cve/CVE-2024-7904.htmlhttps://patchthecve.com/cve/CVE-2024-7904.htmlWed, 17 Jun 2026 08:21:09 +0000MEDIUM 6.3: A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/file_manage_control.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be https://patchthecve.com/cve/CVE-2024-7903.htmlhttps://patchthecve.com/cve/CVE-2024-7903.htmlWed, 17 Jun 2026 08:21:09 +0000MEDIUM 6.3: A vulnerability was found in DedeBIZ 6.3.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/media_add.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack can be l