CVE-2023-43234

CriticalCVSS 9.8

Published: 27/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.00%

59th percentile - higher than 59% of all known CVEs

Summary

DedeBIZ v6.2.11 was found to have multiple remote code execution (RCE) vulnerabilities in /admin/file_manage_control.php via the $activepath and $filename parameters.

Risk Assessment

An attacker can remotely execute arbitrary code on the server, leading to full system compromise, data theft, or service disruption.

Recommendation

Immediately update DedeBIZ to the latest available version and restrict access to the admin panel to trusted IP addresses only.

Original NVD description (English source)

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.