Threats tagged 'ghsa-3fv2-ccqm-h3x9'

DedeBIZ versions up to 6.3.2 contain a SQL injection vulnerability in the /admin/freelist_main.php file via the orderby parameter. This vulnerability allows remote attackers with high privileges to manipulate SQL queries, potentially leading to limited confidentiality, integrity, and availability impacts. Public exploit code is available for this vulnerability.