DedeBIZ sys_sql_query.php sql injection

CVE-2023-3839

What is CVE-2023-3839?

A SQL injection vulnerability has been identified in the DedeBIZ 6.2.10 application, specifically within the /admin/sys_sql_query.php file. This vulnerability allows attackers to manipulate the 'sqlquery' parameter, potentially leading to unauthorized access to sensitive data. Although the attack can be launched remotely, it is important to note that the complexity of executing this attack is relatively high, making it challenging for potential exploiters. The issue has been made public, raising concerns for users of the affected version. Despite attempts to notify the vendor regarding this risk, no response has been received.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References