CVE-2023-43234

Critical · CVSS 9.8

DedeBIZ — Remote Code Execution (RCE) via file management parameter injection

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; NVD-CWE-noinfo, CWE-94

Description

DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.

Search profile — drives PoC discovery

Symbols file_manage_control.php$activepath$filename/admin/file_manage_control.php

Keywords CVE-2023-43234DedeBIZDedeBIZ v6.2.11RCEfile_manage_controlactivepathfilenameremote code executiondedebiz admin

Versions: v6.2.11

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

yux1azhengye/mycve candidate

cited in references

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z